How do I install the dynamic domain manager using custom certificates?

Installing the dynamic domain manager and its backup using custom certificates

About this task

You can install the dynamic domain manager and its backup using default certificates, as described in Installing the dynamic domain manager and backup dynamic domain manager, or you can optionally use custom certificates.

To install dynamic domain manager and backup dynamic domain manager using custom certificates, perform the following steps:

Procedure

  1. Generate the custom certificates required for installing the dynamic domain manager and backup dynamic domain manager using the certman generate command: 
    certman generate -keypasswd <key_pwd> -outpath <output_path>
  2. Extract the certificates from the master domain manager keystore using the certman extract command. Specify a different path for the -output parameter to avoid overwriting the existing tls.crt you generated in step 1. 
    certman extract -outpath <different output path> [-storepasswd <pw>]
  3. Retrieve the jwt.crt certificate from the master domain manager. This certificate is automatically generated and stored in the <TWA_DATA_DIR>/ssl/depot directory.
    1. If the jwt.crt file is not present in the <TWA_DATA_DIR>/ssl/depot directory, extract it from the master domain manager truststore by running the following command: 
      <installation_dir>/TWS/JavaExt/jre/jre/bin/keytool -exportcert -alias mpjwtkey -keystore 
<installation_dir>/usr/servers/engineServer/resources/security/TWSServerTrustFile.p12 -rfc -file <YOUR_PATH>/jwt.crt
  4. Copy the jwt.crt file to the workstation where you plan to install the dynamic domain manager or backup dynamic domain manager. Place it in the same directory as the custom certificates generated in step 1.
  5. Browse to the folder where the serverinst command is located:
    On Windows operating systems
    image_location\TWS\interp_name
    On UNIX operating systems
    image_location/TWS/interp_name
  6. Start the installation specifying the path to the dynamic domain manager certificates using the sslkeysfolder parameter:
    On Windows operating systems
    cscript serverinst.vbs --acceptlicense yes --rdbmstype db_type 
        --dbhostname db_hostname --dbport db_port --dbname db_name 
        --dbuser db_user --dbpassword db_password --wauser wa_user 
        --wapassword wa_password --componenttype DDM --domain domain_name
        --master mdm_name --mdmbrokerhostname mdm_broker_host_name 
        --mdmhttpsport mdm_https_host_name --wlpdir Liberty_installation_dir\wlp
        --sslkeysfolder path_to_certificates --sslpassword certificate_password
    On UNIX operating systems
    ./serverinst.sh --acceptlicense yes --rdbmstype db_type 
        --dbhostname db_hostname --dbport db_port --dbname db_name 
        --dbuser db_user --dbpassword db_password --wauser wa_user 
        --wapassword wa_password --componenttype DDM --domain domain_name 
        --master mdm_name --mdmbrokerhostname mdm_broker_host_name 
        --mdmhttpsport mdm_https_host_name --wlpdir Liberty_installation_dir/wlp
        --sslkeysfolder path_to_certificates --sslpassword certificate_password
  7. Repeat the same procedure for the backup dynamic domain manager.

Results

You have now successfully installed the dynamic domain manager and backup dynamic domain manager