6.6 Importing a Custom SSL Server for a Certificate Authority (CA)

To run SSL tests that require validation of a security certificate, it is necessary to import custom SSL certificates if a Web site or Web application has a custom Secure SSL Server for a Certificate Authority (CA). You must obtain a copy of the required public key file from the Web site and import it into the Experience Manager keystore library.

6.6.1 Obtaining a Copy of the Required Public Key File

To get the public key file:

  1. Use Internet Explorer* to navigate to the HTTPS Web site.

  2. From the menu, click File > Properties.

  3. Click the Certificate button.

  4. Click the Certificate Path tab.

  5. Select the root CA certificate.

  6. Click the Details tab.

  7. Click the Copy to file button.

  8. Click Next.

  9. Select Base‑64 encoded X.509 as the format.

  10. Click Next.

  11. Type a file name, click Next, then click Finish.

6.6.2 Updating the Experience Manager Monitor

The certificate file might be the in X.509 v1, v2, or v3 format. After you have the certificate file, update the Experience Manager Monitor.

To update the Experience Manager Monitor:

  1. Stop the Experience Manager monitor process.

  2. Open a command line window and navigate to the /OperationsCenter_ExperienceManager_install_path/jre/bin directory.

  3. Run the following command:

    ./keytool –import –keystore ../lib/security/cacerts –file <pubkey.filename.withlocation> -alias customerName

  4. When prompted, type the password for this keystore: changeit

  5. To verify success, run the following command and confirm that the custom certificate is listed:

    ./keytool –list –v –keystore ./lib/security/cacerts

    You can also use this command to view a list of all current certificates.

  6. Edit the monitor.properties file by setting tests.https.trustManagerMode=ENABLED.

  7. Restart the monitor and test the Web site access.