Roadmap for Configuring SSL

Task

Activities

Notes

Create CentraSite keys and certificates

Generate a public key/private key pair.

Generate a certificate signing request (CSR) and send to the certificate authority (CA) for signing.

Receive validated certificate from the CA.

Import signed certificate into a keystore.

Required for one-way and two-way SSL connections.

Refer to the documentation for Java keytool or your certificate management tool.

Create keystore and truststore for CentraSite

Create a keystore and import the signed certificate and private key.

Create a truststore and import the certificate of the signing CA.

Store the keystore and truststore in a secure CentraSite certificates directory.

Important:

If you use a Java keytool to create the keystore, you cannot import an existing private key. You can use other tools such as OpenSSL or Portecle.

Required for one-way and two-way SSL connections.

Refer to the documentation for your certificate management tool.

Obtain certificates of webMethods Mediator

Use the CentraSite truststore to save:

Signed certificate of the Mediator.

Signed certificate of the CA for the Mediator's SSL certificate.

Required for one-way and two-way SSL connections.