Importing IBM SSL certificates to client hosts

Use the following steps to import SSL certificates to client hosts for the Rational® ClearCase® remote client.

  1. Create a cert.der file on the CM Server if you have not already done so:
    1. Open the New Key file in IKEYMAN.
    2. Select Personal Certificates from the drop-down list.
    3. Click Extract.
    4. Select Binary DER Data for the Data type.
    5. Click OK.
  2. Manually install the certificate on each client machine.
    1. Copy the cert.der file from the CM Server into the directory on your client in which the Java Runtime Environment (JRE) that you are using with the Rational ClearCase remove client is installed.
    2. Set $JAVA_HOME to the directory to which you copied cert.der in step 2.a.
    3. Run the keytool command.
      • On Windows hosts:

        "%JAVA_HOME%\bin\keytool.exe" -import -alias certificate-name -file cert.der –keystore "%JAVA_HOME%\lib\security\cacerts"

      • On hosts running Linux or the UNIX system:

        $JAVA_HOME/bin/keytool -import -alias certificate-name -file cert.der -keystore $JAVA_HOME/lib/security/cacerts

      where certificate-name is a unique name associated with the cert.der file that you imported.
    4. Enter the keystore password when prompted. By default, this password is changeit.

You should now be able to connect to the CM Server from theRational ClearCase remote client using https.

Parent topic: Configuring CM server support for the Rational ClearCase remote client
Feedback