When you enable secure communication within the domain, you also secure connections between the domain and Informatica client applications. Based on the truststore files used, you might need to specify the location and password for the truststore files in environment variables on each client host.
You might need to set the following environment variables on each client host:
INFA_TRUSTSTORE
Set this variable to the directory that contains the truststore files for the SSL certificates. The directory must contain truststore files named
infa_truststore.jks
and
infa_truststore.pem
.
INFA_TRUSTSTORE_PASSWORD
Set this variable to the password for the
infa_truststore.jks
file. The password must be encrypted. Use the command line program
pmpasswd
to encrypt the password.
INFA_TRUSTSTORE_PASSWORD is optional if you use any CDI-PC thick client, or commands such as pmcmd or pmrep. Enter a password only for the infacmd commands.
If you use a custom SSL certificate to secure the domain, set the INFA_TRUSTSTORE and
INFA_TRUSTSTORE_PASSWORD environment variables on each client host. Copy the
infa_truststore.jks
and
infa_truststore.pem
truststore files to each client host. You
must specify the location of the files and the truststore password.
When you establish a connection between the
CDI-PC domain and the CDI-PC client, it is not mandatory to set the
INFA_TRUSTSTORE_PASSWORD environment variable. You can establish a connection by
configuring only the INFA_TRUSTSTORE variable.
Before you set these environment
variables, see the following guidelines:
The
infa_truststore.jks
file has an associated password
whereas the
infa_truststore.pem
file doesn't have an
associated password.
If you have installed only the
CDI-PC client, it is not required to configure the INFA_TRUSTSTORE_PASSWORD
environment variable.
ASK INFAPreview
