Configuring the keystore on the broker

After you have created the keystore which holds the private key and certificate for the broker, it should be copied to the broker machine and the broker properties configured accordingly.

Before you begin

To configure the keystore on the broker you require a .p12 file when using self signed certificates, see Creating a self signed certificate or a .pem file if using CA certificates, see Certificate Authority signed certificates.

About this task

To configure the keystore on the broker complete the following steps

Procedure

  1. Copy the .p12 or .pem file to the working directory of the broker machine.
  2. Edit the trc_broker.properties file and configure the TLSCertificateFile property, setting it to the name of the .p12 or .pem file.
    Note: Use DefaultTLSCertificateFile to configure the certificate used for all connections to this broker. Each inbound or broker connection can also be configured to use a different certificate.
  3. Use the TLSCertificatePassphrase property to define a password for the keystore.
  4. Save the properties file.
  5. Restart the broker service.
    Windows systems
    1. Navigate to Control Panel > Administrative tools > Services
    2. Right click BigFix® Remote Control-Internet Connection Broker and select Restart.
    Linux systems
    Depending on the type of Linux operating system that you are using, you can use one of the following commands to restart the broker service.
    • /sbin/service ibmtrcicb restart
    • /etc/init.d/ibmtrcicb restart