Configuring the Java Keystore File
TDV includes a generic Java KeyStore (JKS) file so that you can use it for development and testing of Web services and for JDBC secured over HTTPS ports. If you plan to build secure Java programs, it is recommended that all TDV instances be configured with their own JKS certificate prior to deployment.
You need to configure the JKS digital certificate that you intend to use for secured Web services and secured JDBC communications. The JKS digital certificate initiates and establishes SSL communication over HTTPS and LDAP ports.
You need Read All Resources and Modify All Resources rights to change the JKS digital certificate file location, file type, or the password.
If a trust store location is not specified, a keystore file is searched for in the following locations:
• $JAVA_HOME/lib/security/jssecacerts
• $JAVA_HOME/lib/security/cacerts
To configure the JKS digital certificate for TDV using the SSL MANAGEMENT page
1. Obtain a JKS digital certificate from a Certificate Authority (CA), or generate your own using the keytool command-line utility available in the following directory:
<TDV_install_dir>/jdk/bin
2. Open Studio, and select Administration > Launch Manager (Web) to open the TDV Manager Web interface.
3. Log in to Manager.
4. In Manager, choose CONFIGURATION > SSL to display the SSL MANAGEMENT page.
5. In the New Value column on the Java Keystore File Location page, enter the absolute path to the new JKS file on the server.
6. Click APPLY.
A dialog warns that the new value takes effect only after server restart. Another prompt notifies you of a successful change and then refreshes the page.
The REVERT button recovers the current value until TDV restart.
7. Change the Java Keystore File Type and the Java Keystore Password values so that the values when the server restarts match the digital certificate being installed.
8. Restart the TDV Server to load the keystore and apply the changes.
