Set the TLS Store Certificate Password

Identity Management Service › Connectors Guide › Configuring CA IAM Connector Server › Customize the Configuration for CA IAM Connector Server › Set the TLS Store Certificate Password

Set the TLS Store Certificate Password

CA IAM Connector Server uses two certificates: one for each of the following roles:

CA IAM Connector Server as a server—When LDAP and client requests a TLS-secured connection, CA IAM Connector Server acts as an LDAP server. CA IAM Connector Server uses a certificate to secure this communication.
CA IAM Connector Server as a client—When CA IAM Connector Server requests a secure connection with an endpoint, CA IAM Connector Server acts as a client. It uses a different certificate to secure this communication.

When you install CA IAM Connector Server these certificates each have a temporary password. We recommend that you update these passwords.

By default, these certificates are stored in the same keystore. However you can store them in separate keystores if you prefer.

Follow these steps:

Stop CA IAM Connector Server.
Open a command prompt, then change to the following directory:
```
cs_home/jcs/tools/ldaps_password
```
Use the following command to update the password of the keystore for the server:
```
ldaps_password new-password
```
This command updates the encrypted commonConfiguration.keystorePassword value in server_shared.properties.
Use the following command to update the password of the keystore for the client:
```
ldaps_password new-password connectorManager.connectorClientCertStorePassword ../conf/override/server_jcs.properties
```
This command updates the encrypted connectorManager.connectorClientCertStorePassword value in server_jcs.properties.

Note: The password for the keystore is the password that you set during CA IAM Connector Server installation.
Restart CA IAM Connector Server.

Note: Alternatively, you can manage the keystore using the keytool utility included in the Java Runtime Environment. This lets you install your own certificate instead of the default Provisioning Server certificate that the installer configures.