IBM WebSphere V5.0 Security - CGISecurity

3. Set the following settings, then click OK when you are done:
Key database file: JKS
File name: WASWebContainer.jks
Location: c:\WebSphere\Appserver\etc\ (or the directory of your choice)
4. At the password prompt window, enter the password of your choice; for this
sample, use password.
5. Optionally, delete all the public Certificate Authority (CA) certificates under the
Signer Certificates.
6. From the ikeyman menu, select Create -> New Self-Signed Certificate.
Specify the fields with your values; the followings were used fo this sample:
Key Label: WASWebContainer
Version: X509 V3
Key Size: 1024
Common Name: wassrv01.itso.ibm.com
Organization: IBM
Country: US
Validity Period: 365
Click OK when you are finished.
7. Extract the public self-signed certificate key, as it will be used later by the Web
server plug-in peer to authenticate connections originating from the
embedded HTTP server in WebSphere.
8. Select Personal Certificates from the drop-down list, then select the
WASWebContainer certificate that was just created.
9. Click the Extract Certificate button, ensuring that WASWebContainer
remains selected. Extract the certificate to a file:
Data type: Base64-encoded ASCII data
Certificate file name: WASWebContainerPubCert.arm
Location: c:\WebSphere\Appserver\etc
Click OK when you are finished.
10.Close the database and quit ikeyman when you are finished.
Chapter 10. Administering WebSphere security 305