SiteMinder Agent for SharePoint Guide › Advanced Options › How to Protect the Claims WS Service using SSL › Create a Trusted Store for the Root Certificate Authority Certificate

Create a Trusted Store for the Root Certificate Authority Certificate

The server on which your Agent for SharePoint runs also requires a separate trusted store for the root certificate authority certificates. If you use certificates signed by a third-party certificate authority, import the certificate authority certificate signed by the third party into this trusted store. If you are using a self-signed certificate import either the self-signed certificate or the associated public key into this trusted store.

Important! Do not use self-signed certificates in production environments. We recommend using self-signed certificates in test environments only.

Follow these steps:

Note: This procedure provides one possible example of how to configure this feature using third-party tools. CA Technologies did not develop nor provide these tools. These tools are subject to change at any time by the third party without notice. Use this procedure as a guide for configuring this feature in your specific environment. The actual steps required in your situation could be different from the steps that are shown here.

1. Copy your certificate to the server on which your Agent for SharePoint runs.
2. Open a Command Prompt window.
3. Create a trusted store with the following command:

   Keytool -importcert -alias alias_name -file path_to_root_certificate -trustcacerts -keystore relative_path_to_trusted_store -storepass trusted_store_password -storetype JCEKS
   

   Note: We recommend using a relative location under the Agent-for-SharePoint_home\SSL\keys directory