When you enable secure communication, you secure the connections between the following components:

The Service Manager and all services running in the domain
The Data Integration Service and the Model Repository Service
The Data Integration Service and the workflow processes
The PowerCenter Integration Service and the PowerCenter Repository Service
The domain services and the Informatica client tools and command line programs

To enable secure communication in the domain, you need an SSL key and certificate. SSL keys and certificates are stored in keystore and truststore files.

Informatica provides keystores and truststores based on an SSL key and certificate that is common to all Informatica installations. For better security, you can provide a custom SSL key and certificate. The SSL certificate can be self-signed or issued by a certificate authority. Use a certificate from a certificate authority for a more secure domain.

Informatica requires keystore and truststore files in PEM and JKS formats with the following names:

infa_keystore.pem
infa_truststore.pem
infa_keystore.jks
infa_truststore.jks

If you have a keystore and truststore in JKS format, export the certificate and key to create the keystore and truststore in PEM format.

If you have a keystore and truststore in PEM format, convert the PEM keystore file to PKCS12. Then, export the certificate and key to JKS files.

If you do not have keystore and truststore files, you can create them with OpenSSL and Java keytool.

Download OpenSSL at the following link: http://www.openssl.org/source/.

Java keytool is part of the Java Development Kit (JDK). Download the JDK at the following link: http://www.oracle.com/technetwork/java/javase/downloads/index.html

The software available for download at the referenced links belongs to a third party or third parties, not Informatica Corporation. The download links are subject to the possibility of errors, omissions or change. Informatica assumes no responsibility for such links and/or such software, disclaims all warranties, either express or implied, including but not limited to, implied warranties of merchantability, fitness for a particular purpose, title and non-infringement, and disclaims all liability relating thereto.