Maximo

Hi Mohammad,

If I understand properly your requirement you have already .pfx file and would like to update certificate on Maximo server.
I'll describe you how we are doing this thing.

Prerequisites:
*.pfx file (needs to include private and public keys, as well as full certification chain)

Steps:
1. On the server where IBM HTTP Server (IHS) is installed start IBM Key Management tool (HTTPServer\bin\ikeyman.bat)
2. Create new key database (*.kdb)
    Key database type: CMS
    File Name (for example): 20230527_maximo.kdb
    Location (for example): C:\IBM\HTTPServer\certificate
3. Press OK button and in the password prompt specify database password and make sure that Stash password to a file option is checked.
4. Using Import… button import *.pfx certificate into Personal Certificates (option selected from select box).

Key File Type: PKCS12
File name: (pfx file name including extension)
Location: (path to folder with *.pfx file)

When prompted provide password which was used to protect *.pfx file (set when exporting certificate content).

5. Change certificate label (for example to your maximo domain)
6. Double-click imported certificate entry and check "Set the certificate as the default" checkbox option. This check box at the end of dialog needs to be set.
7. Switch to Signer Certificates and make sure that public certificates from the certificate chain are imported properly. If not (e.g. *.pfx file has been exported without full certification chain) then the list is empty.
8. Open HTTPServer\conf\https.conf file and update reference to new files:
- key database file (*.kdb)
- stashed password file (*.sth)
For example:
KeyFile C:/IBM/HTTPServer/certificate/20230527_maximo.kdb
SSLStashFile C:/IBM/HTTPServer/certificate/20230527_maximo.sth
9. Restart IHS Windows Service

Good luck!

Can anyone please help me with this?

Need to update my ssl certificate in the server so i can access to maximo in public it's .pfx do i have to do it with ikeyman or like the attached one 

--

Mohammad Al-Shaar

Computer Engineer

Prozone Middle East for General Trading WLL

Wafra Real Estate Building, 2nd floor, Ahmed Al-Jaber Street, Al-Sharq

Cell: +965 69626814

mohamed.shaar@prozone-me.com

Hi Mohammad,

If I understand properly your requirement you have already .pfx file and would like to update certificate on Maximo server.
I'll describe you how we are doing this thing.

Prerequisites:
*.pfx file (needs to include private and public keys, as well as full certification chain)

Steps:
1. On the server where IBM HTTP Server (IHS) is installed start IBM Key Management tool (HTTPServer\bin\ikeyman.bat)
2. Create new key database (*.kdb)
    Key database type: CMS
    File Name (for example): 20230527_maximo.kdb
    Location (for example): C:\IBM\HTTPServer\certificate
3. Press OK button and in the password prompt specify database password and make sure that Stash password to a file option is checked.
4. Using Import… button import *.pfx certificate into Personal Certificates (option selected from select box).

Key File Type: PKCS12
File name: (pfx file name including extension)
Location: (path to folder with *.pfx file)

When prompted provide password which was used to protect *.pfx file (set when exporting certificate content).

5. Change certificate label (for example to your maximo domain)
6. Double-click imported certificate entry and check "Set the certificate as the default" checkbox option. This check box at the end of dialog needs to be set.
7. Switch to Signer Certificates and make sure that public certificates from the certificate chain are imported properly. If not (e.g. *.pfx file has been exported without full certification chain) then the list is empty.
8. Open HTTPServer\conf\https.conf file and update reference to new files:
- key database file (*.kdb)
- stashed password file (*.sth)
For example:
KeyFile C:/IBM/HTTPServer/certificate/20230527_maximo.kdb
SSLStashFile C:/IBM/HTTPServer/certificate/20230527_maximo.sth
9. Restart IHS Windows Service

Good luck!

Can anyone please help me with this?

Need to update my ssl certificate in the server so i can access to maximo in public it's .pfx do i have to do it with ikeyman or like the attached one 

--

Mohammad Al-Shaar

Computer Engineer

Prozone Middle East for General Trading WLL

Wafra Real Estate Building, 2nd floor, Ahmed Al-Jaber Street, Al-Sharq

Cell: +965 69626814

mohamed.shaar@prozone-me.com

In the step number 4 , i finish it I imported the *.pfx they show me 2 file I chooses the first one and changed the label name but nothing shown in the personal certificates after im done i chose the second one also nothing shown in the personal certificate 

Hi Mohammad,

If I understand properly your requirement you have already .pfx file and would like to update certificate on Maximo server.
I'll describe you how we are doing this thing.

Prerequisites:
*.pfx file (needs to include private and public keys, as well as full certification chain)

Steps:
1. On the server where IBM HTTP Server (IHS) is installed start IBM Key Management tool (HTTPServer\bin\ikeyman.bat)
2. Create new key database (*.kdb)
    Key database type: CMS
    File Name (for example): 20230527_maximo.kdb
    Location (for example): C:\IBM\HTTPServer\certificate
3. Press OK button and in the password prompt specify database password and make sure that Stash password to a file option is checked.
4. Using Import… button import *.pfx certificate into Personal Certificates (option selected from select box).

Key File Type: PKCS12
File name: (pfx file name including extension)
Location: (path to folder with *.pfx file)

When prompted provide password which was used to protect *.pfx file (set when exporting certificate content).

5. Change certificate label (for example to your maximo domain)
6. Double-click imported certificate entry and check "Set the certificate as the default" checkbox option. This check box at the end of dialog needs to be set.
7. Switch to Signer Certificates and make sure that public certificates from the certificate chain are imported properly. If not (e.g. *.pfx file has been exported without full certification chain) then the list is empty.
8. Open HTTPServer\conf\https.conf file and update reference to new files:
- key database file (*.kdb)
- stashed password file (*.sth)
For example:
KeyFile C:/IBM/HTTPServer/certificate/20230527_maximo.kdb
SSLStashFile C:/IBM/HTTPServer/certificate/20230527_maximo.sth
9. Restart IHS Windows Service

Good luck!

Can anyone please help me with this?

Need to update my ssl certificate in the server so i can access to maximo in public it's .pfx do i have to do it with ikeyman or like the attached one 

--

Mohammad Al-Shaar

Computer Engineer

Prozone Middle East for General Trading WLL

Wafra Real Estate Building, 2nd floor, Ahmed Al-Jaber Street, Al-Sharq

Cell: +965 69626814

mohamed.shaar@prozone-me.com