Broker SSL Settings

Broker SSL Settings

Broker SSL settings.
  1. OpenLM Server URL http -> https
  2. Some Java works without any other settings. It will automatically import the TLS certificate on Broker Machine.
  3. Some Java needs to import TLS certificate to Java KeyStore by keytool. Otherwise you get the below error.
    Could be linux distribution problem.



    1. Maybe Broker Java doesn't have permission to read the Trusted Root Certificate
        in Centos directory you imported the certificate.
    2. Maybe Java doesn't have Parameter to read it from Trusted Root Certificate.
        javax.net.ssl.trustStoreType
    3. Maybe we have to let the Java to add the certificate on their own system
        by keytool

    <keetool commands>

    keytool -import -trustcacerts -keystore $JAVA_HOME/lib/security/cacerts -storepass changeit -noprompt -alias mycert -file my-cert.pem

    Only crt and cer, pem can be imported. Not pfx. You can convert pfx to crt.

    • Related Articles

    • Broker Web UI Blocked by Proxy

      If the command to get token is blocked by Proxy, Please use the following commands. wget -Y off -O - http://localhost:5090/api/new-token

    • Workstation Agent Silent Script Sample

      Attached. Developer's Note: ************************************************************************* If Agent silent script is run with SCCM or Desktop Central - it will run under users NETWORK SERVICE or LOCAL SERVICE, so there's no way it will ...

    • API Program + Bat File For Importing User CSV file

      I created a makeshift short program to import users' CSV file into EasyAdmin by API program and Bat File. This program works under the environment of Identity Security Mode and OpenLM Server. <Important: You can't change the file name. These files ...

    • Identity Service PostInstall Secret & Secret PIT Issue

      When you are registering a new URL in Security tab of Identity Service UI, you get the following error. <Cause> ＊Postinstall secret key was replaced based on different Secret PIT. ＊This error occurs when you run Identity Service PostInstall on ...