Before you configure a Web Services application connection to use SSL authentication, you may need to configure certificate files. If the PowerCenter Integration Service authenticates the web service provider, you configure the trust certificates file. If the web service provider authenticates the PowerCenter Integration Service, you configure the client certificate file and the corresponding private key file, passwords, and file types. You can generate client certificate and private key files by running the OpenSSL commands.

The trust certificates file (ca-bundle.crt) contains certificate files from major, trusted certificate authorities. If the certificate bundle does not contain a certificate from a certificate authority that the web service provider uses, you can convert the certificate of the web service provider to PEM format and append it to the ca-bundle.crt file.

The private key for a client certificate must be in PEM format.