HOW TO: Enable the SSL support for LDAP authentication in PowerCenter 8.5 and later versions
Solution
If you have SSL certificate, follow the steps below to enable SSL support in PowerCenter 8.5 and later versions:
1.From the Administration Console in the LDAP configuration window, provide valid LDAP-SSL configuration with SSL port (636).
2.Clear the Trust LDAP Certificate (TC) option
3.Validate Test Connection (The connection should fail)
4.Run the following Keytool Import command from /java/bin to import LDAP SSL certificate to CACERTS:
C:\PC\java\bin> keytool -import -alias IN158076 -file
c:\inqa23ads.QA23ADS01.com_QA23ADS01.crt -keystore ..\jre\lib\security\cacerts
Where
-alias is a unique name to identify the certificate in CACerts.
-file is the SSL cert file
-keystore is the location of the PowerCenter cacerts file(<PowerCenter_Home>\Java\jre\lib\security\cacerts)
5.This will prompt you to enter keystore password and other details. Enter the following details:
Enter keystore password: changeit
Owner: CN=QA23ADS01, DC=QA23ADS01, DC=com
Issuer: CN=QA23ADS01, DC=QA23ADS01, DC=com
Serial number: 5b9bb7e81ed98cbc4ca4b14557f73ea0
Valid from: Tue Apr 24 15:03:03 IST 2007 until: Tue Apr 24 15:11:55 IST 2057 Certificate fingerprints:
MD5: CE:66:B0:85:D3:14:ED:AA:BC:E9:9B:F1:15:3D:D9:92
SHA1: 6D:B5:F5:02:15:0A:08:28:D1:C2:3E:FD:9D:05:0B:49:CE:F8:C5:11
Trust this certificate? [no]: yes
Certificate was added to keystore
6.Re-validate the Test Connection.
The connection should pass.
7.Go to Security domain tab and import users and groups.
