IBM Asset & Facilities Management Your destination for peer and expert insights to help unlock the power of data with AI and Asset & Facilities Management to advance your digital reinvention. Join / Log in
Hi Mohammad,If I understand properly your requirement you have already .pfx file and would like to update certificate on Maximo server.I'll describe you how we are doing this thing.Prerequisites:*.pfx file (needs to include private and public keys, as well as full certification chain)Steps:1. On the server where IBM HTTP Server (IHS) is installed start IBM Key Management tool (HTTPServer\bin\ikeyman.bat)2. Create new key database (*.kdb) Key database type: CMS File Name (for example): 20230527_maximo.kdb Location (for example): C:\IBM\HTTPServer\certificate3. Press OK button and in the password prompt specify database password and make sure that Stash password to a file option is checked.4. Using Import… button import *.pfx certificate into Personal Certificates (option selected from select box).Key File Type: PKCS12File name: (pfx file name including extension)Location: (path to folder with *.pfx file)When prompted provide password which was used to protect *.pfx file (set when exporting certificate content).5. Change certificate label (for example to your maximo domain)6. Double-click imported certificate entry and check "Set the certificate as the default" checkbox option. This check box at the end of dialog needs to be set.7. Switch to Signer Certificates and make sure that public certificates from the certificate chain are imported properly. If not (e.g. *.pfx file has been exported without full certification chain) then the list is empty.8. Open HTTPServer\conf\https.conf file and update reference to new files:- key database file (*.kdb)- stashed password file (*.sth)For example:KeyFile C:/IBM/HTTPServer/certificate/20230527_maximo.kdbSSLStashFile C:/IBM/HTTPServer/certificate/20230527_maximo.sth9. Restart IHS Windows ServiceGood luck!
In the step number 4 , i finish it I imported the *.pfx they show me 2 file I chooses the first one and changed the label name but nothing shown in the personal certificates after im done i chose the second one also nothing shown in the personal certificate
Hi Mohammad, you need to upload the certificate in Personal Certificates section, and then upload root and intermediate certificates in Signer Certificates section.