...
The tool for working with SSL Certificates on IHS is called IKEYMAN.
Verify GSKit Version
We need to ensure that the GSKit can start and is the minimal version for 2048 certificates.
Consider putting this into it's own article.
To start GSKit regardless of the environment you must specify a JAVAHOME which points to a version of Java with JCE. IBM actually packages the right version of java for you. On Windows, go the command line and issue the following commands,
| Code Block | ||
|---|---|---|
| ||
E:\
cd opt\IBMIHS\gsk7\bin
set JAVA_HOME=E:\opt\IBMIHS\java\jre
gsk7ikm.exe |
Which should launch GSKit (IBM Key Management program). Click Help and then About iKeyman and confirm it meets the minimal version for 2048 certificates.
Generate CSR
..
Import Private Key
...