requires valid custom keystore and truststore certificates to secure communication between
Informatica Intelligent Cloud Services
and the domain, and between the domain and clients. The TLS utility verifies that the certificates are valid for communication between two hosts. You can choose to run the utility to validate your certificates.
Copy the certificates that you want to validate to the same machine.
After you validate the certificates, you can copy them to the host machine.
Extract the ZIP file to any location on the machine.
Open a command prompt from the directory where you extracted the utility, and run the following command to start the utility:
java -jar CDI-PC_TLS_Utility.jar
The utility prompts you for the details of the first host.
Enter certificate details of the domain, Secure Agent, or
CDI-PC Client
machine.
If you have multiple domain nodes or multiple Secure Agents, enter the certificate details of all the domain, Secure Agent, or
CDI-PC Client
machines.
Enter the following details for the first host and press
Enter
after each entry:
First host keystore path. The absolute path to the keystore file on the first host.
First host keystore password. The keystore password.
First host truststore path. The absolute path to the truststore file on the first host.
First host truststore password. The keystore password.
First host DNS or IP address. The DNS or IP address of the host on which you use the certificate. If you enter the DNS, enter the fully qualified host name and the short name of the host. Enter comma-separated values. If the certificate includes wildcards in the host details, enter the DNS information for each host on which you use the certificate.
Enter the details for the second host.
With details of both hosts, the utility tries to connect from the first host to the second host and verifies the host entries in the certificates against details entered. If the second host certificates are present on the first host and host entries are validated, the utility returns a message to indicate that the validation is successful.
If the certificates of the second host are not present in the truststore of the first host, you can choose whether you want the utility to import the certificates. The import modifies the truststore of the first host. Enter
Y
to import the certificates and continue or
N
to exit.
If you choose to import the certificates, the utility imports the certificates and continues the validation.
The utility then tries to connect from the second host to the first host. If connection and host entry verification succeed, the utility returns a successful validation message. You might be prompted to import the certificates of the first host into the second host if they aren't present in the truststore of the second host.
If connection and host entry verification succeed, the utility returns a successful validation message.
ASK INFAPreview
