Installation for PowerCenter and Data Quality

10.5.6
- 10.5.7
- 10.5.5.1
- 10.5.5
- 10.5.4
- 10.5.3
- 10.5.2
- 10.5.1
- 10.5
- 10.4.1
- 10.4.0

Back Next

Configure the Client for a Secure Domain

When you enable secure communication within the domain, you also secure connections between the domain and Informatica client applications. Based on the truststore files used, you might need to specify the location and password for the truststore files in environment variables on each client host.

You might need to set the following environment variables on each client host:

INFA_TRUSTSTORE: Set this variable to the directory that contains the truststore files for the SSL certificates. The directory must contain truststore files named
infa_truststore.jks
and
infa_truststore.pem
.

INFA_TRUSTSTORE_PASSWORD: Set this variable to the password for the
infa_truststore.jks
file. The password must be encrypted. Use the command line program
pmpasswd
to encrypt the password.

INFA_TRUSTSTORE_PASSWORD is optional if you use any PowerCenter thick client, or commands such as pmcmd or pmrep. Enter a password only for the infacmd commands.

Informatica provides an SSL certificate that you can use to secure the domain. When you install the Informatica clients, the installer sets the environment variables and installs the truststore files in the following directory by default:

<Informatica installation directory>\clients\shared\security

If you use the default Informatica SSL certificate, and the

infa_truststore.jks

and

infa_truststore.pem

are in the default directory, you do not need to set the INFA_TRUSTSTORE or INFA_TRUSTSTORE_PASSWORD environment variables.

You must set the INFA_TRUSTSTORE and INFA_TRUSTSTORE_PASSWORD environment variables on each client host in the following scenarios:

You use a custom SSL certificate to secure the domain.: If you provide an SSL certificate to use to secure the domain, copy the
infa_truststore.jks
and
infa_truststore.pem
truststore files to each client host. You must specify the location of the files and the truststore password.
You use the default Informatica SSL certificate, but the truststore files are not in the default Informatica directory.: If you use the default Informatica SSL certificate, but the
infa_truststore.jks
and
infa_truststore.pem
truststore files are not in the default Informatica directory, you must specify the location of the files and the truststore password.

When you establish a connection between the Informatica domain and the PowerCenter client, it is not mandatory to set the INFA_TRUSTSTORE_PASSWORD environment variable. You can establish a connection by configuring only the INFA_TRUSTSTORE variable.

Before you set these environment variables, see the following guidelines:

The

infa_truststore.jks

file has an associated password whereas the

infa_truststore.pem

file doesn't have an associated password.

If you have installed only the PowerCenter client, it is not required to configure the INFA_TRUSTSTORE_PASSWORD environment variable.

Rename Saved Search

Table of Contents

Installation for PowerCenter and Data Quality

Installation for PowerCenter and Data Quality

Configure the Client for a Secure Domain

Configure the Client for a Secure Domain