By default, Unwired Server includes two security profiles: "default" and "default_mutual." The "default" security profile uses the "sample1" certificate and the "default_mutual" security profile uses the "sample2" certificate. The certificate used by any other user-created security profiles is specified during security profile creation.
Prerequisites
- Determine whether the SSL security profile for the secure management (IIOPS) port requires "default" or "default_mutual" authentication. If the security profile requires "default" authentication, the Sybase Control Center truststore should contain the Unwired Server certificate. If it requires "default_mutual" authentication, the Sybase Control Center and Unwired Server truststores should each contain a copy of the other's certificate.
- By default, the keystore and truststore passwords are both "changeit".
In a production deployment of Unwired Server, use the keytool utility to set new passwords for both of these files.
Task
These steps describe the basics of exporting and import a certificate. Use the same steps to import your certificate into Unwired Server and Sybase Control Center keystore.
- Set up the certificates:
- Add %JAVA_HOME% to your system path.
- At a command prompt, change to <UnwiredPlatform_InstallDir>\Servers\UnwiredServer\Repository\Security.
- Export the "default" security profile certificate sample1.crt from the Unwired Server keystore by running:
keytool -keystore keystore.jks -storepass changeit -alias sample1 -exportcert -file sample1.crt
- Configure Sybase Control Center:
- Open <UnwiredPlatform_InstallDir>\SCC-XX\services\Messaging\lib\eas\lib\Repository\Server\EmbeddedJMS\Instance\com\sybase\djc\server\ApplicationServer\EmbeddedJMS.properties.
- Insert these values to the keystore and truststore files :
keyStore=<filePath>/<keyStoreName>.jks
keyStorePassword=<password>
trustStore=<filePath>/<trustStoreName>.jks
trustStorePassword=<password>
Or, you can copy the Unwired Server keystore and truststore files and use them for Sybase Control Center instead.
- Import sample1.crt into the Sybase Control Center keystore by running:
keytool -keystore keystore.jks -storepass changeit -alias sample1 -importcert -file sample1.crt
- If you are running multiple Unwired Servers as part of a clustered environment, ensure
these changes are repeated on all nodes. If certificates are issued to a specific host, you must generate a new certificate for each node.
Next
Enable and configure the administration port to use the security profile in Sybase Control Center.