Security Guide

10.2 HotFix 1
- 10.4.0
- 10.2 HotFix 2
- 10.2
- 10.1.1 HotFix 1
- 10.1.1
- 10.0

Back Next

Step 3. Import the Certificate into the Truststore Used for SAML Authentication

Import the assertion signing certificate into the truststore file used for SAML authentication on every gateway node within the Informatica domain.

You can import the certificate into the default Informatica truststore file, or into a custom truststore file.

The file name of the default Informatica truststore file is

infa_truststore.jks

. The file is installed in the following location on each node:

<Informatica installation directory>\services\shared\security\infa_truststore.jks

Do not replace the default

infa_truststore.jks

file with a custom truststore file.

If you import the certificate into a custom truststore file, you must save the truststore file in a different directory than the directory containing the default Informatica truststore file. The truststore file name must be

infa_truststore.jks

Use the Java keytool key and certificate management utility to import the certificate into the truststore file on each gateway node.

Copy the certificate files to a local folder on a gateway node within the Informatica domain.

From the command line, go to the location of the keytool utility on the node:

<Informatica installation directory>\java\jre\bin

From the command line, run the following command:

keytool -importcert -alias <certificate alias name> -file <certificate path>\<certificate filename> -keystore <path to infa_truststore.jks> -storepass <keystore password>

Include the password for the truststore file.

Restart the node.

SAML Authentication Setup