{"id":95,"date":"2020-12-16T11:36:55","date_gmt":"2020-12-16T09:36:55","guid":{"rendered":"https:\/\/amsd.go.ro\/wordpress\/?p=95"},"modified":"2021-09-07T11:24:41","modified_gmt":"2021-09-07T08:24:41","slug":"bmc-remedy-ar-system-server-9-x-area-configuration-with-tls-import-ssl-certificate","status":"publish","type":"post","link":"https:\/\/amsd.go.ro\/wordpress\/?p=95","title":{"rendered":"BMC Remedy AR System Server – 9.x – AREA Configuration with TLS, Import SSL certificate"},"content":{"rendered":"

Does Remedy support TLS protocol?<\/strong><\/span>
   Remedy works with <\/span><\/span>TLS protocol since the time it has become serverj.<\/strong>
   Thus now Remedy can work with SSL or TLS.<\/p>\n

How to create keystore and import the certificate to configure Remedy with SSL\/TLS?<\/strong><\/span><\/span><\/span>
General Steps:<\/span>
1. Export the certificate from respective server.
2. Use keytool to import the certificate.
3. Configure Remedy using SSL.<\/span><\/span><\/p>\n

Steps to import the certificate to configure Remedy work with SSL or TLS protocol are as below:<\/strong><\/span>
1. Obtain a certificate from the LDAP, Exchange, or other server with which you want to establish an SSL\/TLS connection, i.e. export the client certificate with .cer extension.  (You can also use .crt and .der files).<\/p>\n

2. Copy the certificate file to the AR Server in which you want to import it.<\/p>\n

    For example: C:\\Certificates\\xxx.cer<\/span><\/span>
    Where xxx is the certificate name.<\/p>\n

3. Verify which Java path is being used by the AR System server (example:  C:\\Program files\\Java\\jre\\bin). This can be verified from the armonitor.cfg\/armonitor.conf<\/p>\n

4. Use a tool to import the certificate.   You can use a 3rd party tool such as Key Store Explorer or the built-in keytool.   To use keytool:<\/span><\/span><\/span><\/span><\/span><\/span><\/p>\n

Open a command prompt and use the below command to import the certificate that you downloaded from the server (xxx.cer)<\/span><\/span><\/div>\n
Note<\/strong>:  You can provide a -keystore value that is not an existing file if you want to use your own Java Key Store.
If you provide a value that does not correspond to an existing file, a new keystore will automatically be created<\/span><\/span><\/div>\n


keytool –import –noprompt –trustcacerts –keystore <path1> -storepass “<password>” –alias <aliasname> -file <path2><\/strong><\/em><\/span><\/span>
Where<\/span><\/span><\/span><\/span><\/p>\n