HI all

 I have 2 horizontal clustering environments of 2 cells. Cell01 want to communicate with cell02, do I need to import cell02 cert on cell01 trust store or do I need to generate ltpa on cell02 and importing on cell01.both cell01 and cell02 are using same federated security configuration and but both are having different apps. Which the suitable option works to avoid ssl handshake.

WAS 7.0.0.27
Windows 2008

Thanks
Venkata

Hi Venkata,
    Yes you need to export and import the keys in the two cells. as the keys are different  over different cells.

  I haven't worked on it , but had some idea while going  through  some documents.
Please correct me if i am wrong.

Thank You. 

Yes, you need to export and import the LTPA keys. Here are the steps and a very nice explanation to import LTPA keys and export LTPA keys.

------------------------------
Faisal Malik
------------------------------

Good morning Venkata,
what exactly do you mean by "Cell01 want to communicate with cell02"? Is it an application running in Cell01 accessing services in Cell02? How does the application on Cell01 access Cell02? Or do you want to establish a single signon (SSO) experience for the users so that they have to login only once and then can access applications in both cells? If you want to setup SSO please check out the documentation at https://www.ibm.com/support/knowledgecenter/SSAW57_8.5.5/com.ibm.websphere.nd.multiplatform.doc/ae/csec_ssovo.html for more details.
If it is an application running on Cell01 accessing an application on Cell02 via SSL you need to establish trust by exchanging the signer certificates in the respective trust stores. How these requests are authenticated is however another question and depends.

Hope this helps ... thanks and have a good day - Hermann

------------------------------
Hermann Huebler
2innovate IT Consulting GmbH
Vienna
Austria

#IBMChampion
------------------------------