Overview

Skill Level: Intermediate

Exercise caution when working on the WebSphere Admin Console

Step-by-step instructions to create a Certificate Signing Request (CSR) in WebSphere Application Server (WAS). The screenshots included are from WAS 9.0.

Ingredients

WebSphere Application Server (the screenshots are from WAS v9.0)

Step-by-step

  1. Login into WAS Admin Console

    Login into WAS Admin Console: https://<WAS_ADMIN_HOST>:<WAS_ADMIN_PORT>/ibm/console

    1

  2. Navigate to certificate configuration section

    Go to Security (Left Nav) -> SSL certificate and key management and click on Key stores and certificates link

    2

  3. Select the KeyStore

    Click on NodeDefaultKeyStore

    3

  4. Navigate to certificate creation section

    Under Additional Properties, click on Personal certificate requests

    4

  5. Start with new certificate creation

    Click on New

    5

  6. Enter the certificate details

    Provide all the necessary details and click on Apply.

    6

  7. Confirm the entered details

    The CSR details can be seen as below. Click on Save.

    7-2

  8. CSR creation successful

    8-2

  9. Get the CSR file

    The CSR file can be obtained from the WAS machine from the highlighted location, File for certificate request.

    9-5

  10. Send to CA

    This CSR file can be sent to any of the Certifying Authority (CA) to receive a signed certificate.

    Based on this CSR, CA will provide a signed certificate. To receive this certificate in WAS, please refer to my recipe https://developer.ibm.com/recipes/tutorials/ssl-certificate-receipt-in-websphere-application-server-was/

     

Join The Discussion