Previous Topic: Configure CA Process Automation ContentNext Topic: Synchronize AWS Master Account


Enable Secured Calls to AWS

The deployment package contains a KEYSTORE file that contains all the current to public endpoint certificates. The KEYSTORE file maintains interoperability between the CA Service Catalog and the AWS SDK.

Follow these steps:

  1. Open Windows Explorer.
  2. Go to the CA Service Catalog server and navigate to the following keystore file location:

    C:\Program Files (x86)\CA\Service Catalog\filestore\contentpacks\CA ASC Amazon Web Services\prescripts

  3. Copy the KEYSTORE file to the CA Service Catalog home directory from the following location:

    C:\Program Files (x86)\CA\Service Catalog

  4. (Optional) Merge the new keystore file with the existing keystore file, if the keystore file exists.
    1. Rename the keystore file available at the C:\Program Files (x86)\CA\Service Catalog\filestore\contentpacks\CA ASC Amazon Web Services\prescripts folder.

      For Example: AWS.keystore

    2. Copy the new file to the C:\Program Files (x86)\CA\Service Catalog folder.
    3. Enter the keytool command, to merge the keystore of the first product, using the following command:
      keytool -importkeystore -srckeystore ".product1_keystore" -destkeystore "%USM_HOME%\".keystore".product1_keystore" 
      

      Specifies the name of keystore file (with the complete file path) for the product you are merging.

    4. Change the password, when prompted. The default password for the AWS keystore file is changeit.
  5. Restart the CA Service Catalog service.

    The new keystore file is used to trust the AWS certificates and allow https calls.