Business Automation

To securely connect your Rule Designer to the Decision Server and Decision Center components that are running in Certified Kubernetes or an OpenShift cluster, it is needed to establish a TLS connection through a security certificate.

Detail steps to obtain the certificate are documented here:

• 
CP4BA Openshift cluster:  https://www.ibm.com/docs/en/cloud-paks/cp-biz-automation/24.0.1?topic=manager-importing-security-certificate-in-rule-designer
• Certified K8S cluster:  https://www.ibm.com/docs/en/odm/9.0.0?topic=designer-importing-security-certificate-in-rule 

For Rule Designer installed on MacOS environment, the security certificate should avoid being placed in ~/Downloads/, ~/Documents/ or ~/Desktop/  folders.  Depending on the version of MacOS, there could have access issue on the file by Eclipse IDE. You might need to grant Eclipse IDE permission to access the files under these folders. Some discussions and suggestion can be found here:  https://discussions.apple.com/thread/254825301?sortBy=rank.

On the other hand,  a recommended way is to place the certificate (truststore.jks) with Eclipse application under `/Applications/Eclipse.app/Contents/Eclipse` folder to avoid file access denied issue.

XXXX@XXXX-MBP contents % ls -l /Applications/Eclipse.app/Contents/Eclipse
total 3080
-rw-r--r--@    1 XXXX  admin     1455 Nov  9  2022 about.html
-rw-r--r--@    1 XXXX  admin  1512744 Dec 16 09:59 artifacts.xml
drwxr-xr-x@   13 XXXX  admin      416 Dec 16 09:35 configuration
drwxr-xr-x@    2 XXXX  admin       64 Dec  1  2023 dropins
-rw-r--r--@    1 XXXX  admin     1232 Jan 13 16:19 eclipse.ini
-rw-r--r--@    1 XXXX  admin    17300 Nov  9  2022 epl-2.0.html
-rw-r--r--@    1 XXXX  admin    15551 Jun  2  2023 epl-v10.html
drwxr-xr-x@  345 XXXX  admin    11040 Dec 16 09:59 features
-rw-r--r--@    1 XXXX  admin     9051 Jun  2  2023 notice.html
drwxr-xr-x@    7 XXXX  admin      224 Jan 13 16:19 p2
drwxr-xr-x@ 1837 XXXX  admin    58784 Dec 16 09:59 plugins
drwxr-xr-x@    3 XXXX  admin       96 Dec  1  2023 readme
drwxr-xr-x@    4 XXXX  admin      128 Dec 16 09:59 studio
-rw-r--r--@    1 XXXX  admin     3975 Jan 13 09:33 truststore.jks

Edit the /Applications/Eclipse.app/Contents/Eclipse/eclipse.ini file and add the following lines at the end.  The certificate in `/Applications/Eclipse.app/Contents/Eclipse` folder will thus be used when making connections to the Decision Server and Decision Center components.

• For Certified Kubernetes installation: 

-Djavax.net.ssl.trustStore=../Eclipse/truststore.jks
-Djavax.net.ssl.trustStorePassword=changeme

• For CP4BA installation: 

-Djavax.net.ssl.trustStore=../Eclipse/truststore.jks
-Djavax.net.ssl.trustStorePassword=changeit

#OperationalDecisionManager(ODM)