Install SSL Certificate for BMC Remedy Mid-Tier Server

Integrating with BMC Remedy › How to Configure a BMC Remedy Integration › How to Configure BMC Remedy Integration Components › Install SSL Certificate for BMC Remedy Mid-Tier Server

Install SSL Certificate for BMC Remedy Mid-Tier Server

If your BMC Remedy Mid-Tier server is running on SSL, install an SSL certificate on the CA Process Automation server. This procedure requires the InstallCerts.jar file that is on the CA SOI installation media at Disk1\ITPAM-Remedy\Supporting Remedy Mid-Tier On SSL\InstallCerts.zip.

To determine if BMC Remedy Mid-Tier is running on SSL, enter the following URL in a browser, using the BMC Remedy Mid-Tier server name and port:

https://host_name:port/arsys/shared/login.jsp

If a login screen opens, the server is running on SSL. Install an SSL certificate if non-SSL access is blocked on the Mid-Tier server or you want to configure a secure communication between CA Process Automation and BMC Remedy. If you enter the URL and a login screen opens, then the server is running on SSL. Otherwise, install the certificate.

Follow these steps:

Extract the files in InstallCerts.jar onto the CA Process Automation server.
Run the following command:
```
Java -jar installcert.jar <host_name>[:port]
```
host_name

Specifies the name of the BMC Remedy Mid-Tier server.

port

(Optional) Specifies the port that the BMC Remedy Mid-Tier server uses.

Note: Do not use a passphrase.

The following message appears:
```
Enter certificate to add to trusted keystore or q to quit: Type 1 and press Enter.
```
The command creates a file named jssecacerts in the same folder.
Copy the itpamcert file to the <jdk_home>\jre1.6.0_0x\lib\security folder on the CA Process Automation server.
Open the c2osvcw.conf file that is at <itpam_home>\server\c2o\bin and add the following two lines to the end of the file:
```
wrapper.java.additional.XX=-Djavax.net.ssl.truststore=
"<jdk_home>\jdk.1.6.0.0N\jre\lib\security\jssecacerts"
```
```
wrapper.java.additional.XX=-Djavax.net.ssl.trustStorePassword="changeit"
```
XX

Specifies the next available wrapper.java.additional number in the file. For example, if wrapper.java.additional.10 is the last number that is defined in the file, use 11 and 12 for these entries.

jdk_home

Specifies the location of the JDK that the CA Process Automation server is running. The N variable in the JDK version is the version indicator.
Keep changeit as the password and restart the CA Process Automation server.
CA Process Automation is configured to connect to BMC Remedy using SSL.