Installing .PFX certificate in OpManager 12.
Here are the steps to be followed
1. First you need to convert the .pfx type to .truststore type. Place your .pfx certificate in \OpManager\jre\bin\ folder. To do that, open a command prompt as an Administrator and go to \OpManager\jre\bin directory.
2. Run this below command with the correct .pfx file.
keytool.exe -importkeystore -srckeystore mykeystore.pfx -destkeystore OpManager.truststore -srcstoretype pkcs12 -deststoretype JKS
It will ask you for a password, please use the pfx password as the truststore password for both destination and source.
3. OpManager.truststore file will be generated under \OpManager\jre\bin folder after running the above command, copy this truststore file, and place it under \OpManager\conf folder.
4. Now edit ssl_server.xml from \opmanager\server_xml_bkp\ folder, and set the values for below attributes.
Search the term "connector port" and replace the values for the attributes highlighted in red.
Save the file in the name server.xml and place it in \OpManager\conf\ folder
5. Edit the OpManagerStartUp.properties file under \OpManager\conf\OpManager folder. Set the value of the parameter "https" as "Enable" and save it.
6. Start OpManager service and check.
New to ADSelfService Plus?
Related Articles
OpManager integration with SDP using .pfx certificate.
Applying .pfx certificate in SDP does not involve creating keystore file which is required for integration. Please follow the below steps to create a Keystore file. Place the file OpManager.TrustStore and SDP PFX file under the OpManager JRE\bin ...Enabling SSL for opmanager web console using pfx or keystore or truststore
Third party SSL certificate implementation in OpManager
Integrating OpManager with Service DeskPlus while SDP using 3rd party SSL Certificate
Solution: For build 12.3.181 and above, SSL enabled ServiceDeskPlus can be integrated directly from UI. Importing trusted certificates OpManager validates the trusted sources with the help of certificates in OpManager truststore. By default ...Importing Certificate provided CA in OpManager
1. Open the command prompt and change to OpManager_Home directory. 2. Generating keystore file: Execute the following command and provide requested details to create OpManager.truststore file under conf folder. >jre\bin\keytool.exe -v -genkey -keyalg ...