enable SSL using ThirdParty Certificate in MartServer
Follow these steps:
1. If the Mart Server service is running, stop it
2. Place your certificate in “C:\Program Files\erwin\Mart Server r9\Tomcat64\conf”
3. Open SecureMart.bat from C:\Program Files\erwin\Mart Server r9\Tomcat64\conf
Replace:
""%JRE_HOME%/bin/keytool" -genkeypair -alias erwin -keyalg RSA -keysize 2048 -sigalg SHA1withRSA -validity 3650 -keystore "%CATALINA_HOME%\conf\mart.jks" -storepass CA8FDE0F4B8D7 -keypass CA8FDE0F4B8D7 -storetype jks -dname "cn=%COMPUTERNAME%, ou=erwin MartServer, o=erwin, l=NYC, c=US"
with:
"%JRE_HOME%/bin/keytool" -importkeystore -deststorepass YOUR_DESTINATIONSTORE_PASSWORD -destkeypass YOUR_DESTINATIONSTORE_PASSWORD -destkeystore "%CATALINA_HOME%\conf\mart.jks" -srckeystore "YOUR CERTIFICATE PATH LOCATION" -srcstoretype TYPE_OF_YOUR_CERTIFICATE -srcstorepass SOURCE_STORE_PASS
Please ensure your certificate includes a private key entry or Mart will fail to start.
4. Open server_ssl. xml file from C:\Program Files\erwin\Mart Server r9\Tomcat64\conf.
specify. jks path and password
keystoreFile="conf/mart.jks"
keystorePass="keystore password"
5. Go to Start\erwin\Enable SSL for Tomcat Web Server
SSL is enabled for Tomcat and your security certificate is imported in the Java keystore. You must install this security certificate on all the computers from where you want to access the Mart.
6. Go to Configure Mart Server
7. Go to Mart Administrator tab and select Transport Layer Security check box.
8. Start Mart Server Or restart MartServer service
9. erwin Mart Administrator home page appears and displays HTTPS in the address bar. If a certificate error appears, click Proceed Anyway to begin the session.
Example of customized SecureMart.bat and server_ssl.xml attached
Comments
0 comments
Please sign in to leave a comment.