How can I use default certificates when DB2 is in SSL mode?

If you have DB2 set up in SSL mode on a UNIX operating system, you can use default certificates and add the DB2 certificate to the default certificates. You can use this configuration on the following components:

• master domain manager
• dynamic domain manager
• Dynamic Workload Console

Proceed as follows:

1. On the workstation where you plan to install the master domain manager, create a folder for storing the certificates.
2. Within this folder, create a subfolder named additionalCAs.
3. Obtain the certificates from the DB2 administrator.
4. Store the certificates in .crt format in the additionalCAs folder.
5. Log in to the component for which you are configuring the database, as listed above.
6. Run the configuredb script as explained in Creating and populating the database for DB2 for the master domain manager and Creating and populating the database for DB2 for the Dynamic Workload Console. Ensure you use the sslkeysfolder and sslpassword parameters to specify the path to the folder containing the certificates and the related password.
7. Proceed with the installation as described in Typical installation scenario.