Maximo

Maximo

Come for answers, stay for best practices. All we're missing is you.

 View Only

Installing a Self-Signed Certificate for Windows Maximo Applications

By Ravi Shah posted 16 days ago

  

When using IBM Maximo applications such as Maximo Mobile, Maximo Anywhere, or other Maximo-based Windows clients, organizations often use a self-signed SSL certificate in non-production or internal environments. Since self-signed certificates are not issued by a trusted Certificate Authority (CA), Windows does not trust them by default.

To avoid SSL warnings, application installation issues, and secure communication errors, you must manually install the certificate into Windows' Trusted Root Certification Authorities store.


Why Install the Self-Signed Certificate?

A self-signed certificate helps encrypt communication between the Maximo application and the Maximo server. However, because the certificate is self-issued, Windows treats it as untrusted until it is added to the trusted certificate store.

Installing the certificate provides the following benefits:

  • Eliminates certificate trust warnings.
  • Enables secure HTTPS communication.
  • Prevents connection and synchronization issues in Maximo Mobile.
  • Ensures smoother application deployment and installation.

Step 1: Export the Certificate from the Maximo Server

If you do not already have the server certificate in .cer format, you can export it directly from your browser.

Using Google Chrome

  1. Open Google Chrome.

  2. Navigate to your Maximo Application Suite URL.

    Example:

    https://maximo.company.com
    
  3. Click the Site Information icon (lock icon or warning icon) next to the URL.

  4. Select Connection is secure or Certificate.

  5. Open the Certificate window.

  6. Navigate to the Details tab.

  7. Click Copy to File to open the Certificate Export Wizard.

  8. Click Next.

  9. Select:

    DER encoded binary X.509 (.der)
    
  10. Click Next.

  11. Choose a file name and location.

    Example:

    public.mobile92.mas.ibm.der
    
  12. Click Finish.

The certificate is now exported and ready for installation.


Step 2: Install the Certificate in Windows

To trust the certificate system-wide, install it in the Trusted Root Certification Authorities store.

Open the Local Computer Certificate Manager

  1. Press:

    Windows + R
    
  2. Type:

    certlm.msc
    
  3. Press Enter.

The Certificate Manager (Local Computer) window opens.


Import the Certificate

  1. Expand:

    Trusted Root Certification Authorities
    
  2. Select:

    Certificates
    
  3. Right-click Certificates.

  4. Navigate to:

    All Tasks → Import
    
  5. Click Next in the Certificate Import Wizard.

  6. Click Browse.

  7. Select the exported .der file.

  8. Click Open.

  9. Click Next.

  10. Select:

    Place all certificates in the following store
    
  11. Ensure the store is:

    Trusted Root Certification Authorities
    
  12. Click Next.

  13. Click Finish.


Step 3: Verify the Certificate Installation

After the import completes:

  1. Refresh the Certificate Manager.

  2. Browse to:

    Trusted Root Certification Authorities
        └── Certificates
    
  3. Locate your Maximo server certificate.

  4. Open the certificate and verify:

    This certificate is OK.
    

Step 4: Restart the Application

After installing the certificate:

  • Close any open browser sessions.
  • Restart Maximo Mobile or Maximo Anywhere.
  • Attempt to reconnect to the Maximo server.

The application should now trust the server certificate and communicate securely without SSL warnings.


Troubleshooting

Certificate Still Not Trusted

  • Confirm the certificate was imported into Local Computer and not Current User.
  • Verify the certificate appears under Trusted Root Certification Authorities.
  • Restart the application or reboot the workstation.

Synchronization or Connection Errors Continue

  • Check that the server URL matches the certificate's Common Name (CN) or Subject Alternative Name (SAN).
  • Verify the certificate has not expired.
  • Ensure the complete certificate chain is installed if intermediate certificates are used.

Access Denied During Import

Run the Certificate Manager with administrative privileges or perform the import using an administrator account.


Conclusion

Installing a self-signed certificate in the Windows Trusted Root Certification Authorities store is a simple but essential step when configuring Maximo Mobile, Maximo Anywhere, or other Maximo applications to communicate securely with a Maximo Application Suite server. Once installed, users can connect without certificate warnings and benefit from encrypted, trusted communication with the Maximo environment.

0 comments
17 views

Permalink