Importing a Client Certificate and Mapping It to a User

You import client certificates through Integration Server Administrator to keep them on file, map them to particular user accounts, and specify how they are to be used.

Keep the following points in mind before importing and mapping certificates:

If you intend to make an SSL connection between Integration Server and an Internet resource that will act as a client, you also need to import a copy of the client's certificate.

Although Integration Server supports loading certificates for LDAP users, Software AG recommends using central user management and then configuring LDAP and certificates in My webMethods Server.

The steps for importing client certificates and CA signing certificates are the same, and are described below.

1. Open the Integration Server Administrator if it is not already open.

4. In the Certificate Path field, enter the path and file name of the file that contains the certificate you want to import.

Note:
The certificate must be located on a path that is accessible to Integration Server. That is, the certificate must be on the same machine as Integration Server.

5. In the User field, enter a user or click search icon

to search for and select a user.

To search for a user in the User Name dialog box, do one of the following:

To select a local user, in the Provider list, select Local. Select the local user to which you want to map the certificate.

If an external user directory is not configured, the Provider list does not appear.

To select a user from an external directory (LDAP or a central user directory), in the Provider list, select the user directory that you want to search. In the Search field, enter the criteria that you want to user to find a user. Click Go. Select the user to which you want to map the certificate.

6. In the Usage list, select the purpose for which you want to import this certificate. Select from one of these options:

SSL Authentication. Use the certificate to represent the client's authentication credentials when making an SSL connection with Integration Server.

Verify. Use the certificate's public key to verify the authenticity of documents, messages, or streams originating from the client and containing a digital signature.

Encrypt. Use the certificate's public key to encrypt outgoing documents, messages, or streams from Integration Server to the client.

Verify and Encrypt. Use the same certificate both to verify the authenticity of documents, messages, or streams originating from the client and containing a digital signature, and to encrypt outgoing documents, messages, or streams from Integration Server to the client.

Message Authentication. Use the certificate to represent the client's authentication credentials when making an SSL connection with Integration Server, when using message-level rather than transport-level authentication (for example, with web service messages whose SOAP message headers contain SSL certificate information).