Configure secure connections for Operations Orchestration Load Balancer

If the Operations Orchestration Load Balancer server requires a secure connection, follow these steps to import the Operations Orchestration Load Balancer server Certificate Authority's root certificate into the Java truststore of Codar. If necessary, contact your Operations Orchestration Load Balancer administrator to obtain the Operations Orchestration Load Balancer server certificate.

For each system running Codar, import the root certificate of Operations Orchestration Load Balancer's Certificate Authority into Codar (you must first export Operations Orchestration Load Balancer's certificate from Operations Orchestration Load Balancer's truststore and then import it into Codar's truststore).

1. Open Operations Orchestration Load Balancer in a Web browser (using https).

2. Export the certificate from the Web browser.

   If you are using a Chrome web browser, complete the following steps:

   1. In the address bar, click the lock icon with the red X over it and select certificate information.
   2. In the Certificate dialog, do the following:

      1. Select the Details tab.

      2. Click Copy to File.
      3. In the Certificate Export Wizard, do the following:
         1. Click Next.
         2. Select Base-64 encoded X.509 (.CER) and click Next.
         3. Click Browse and select a directory in which to save the certificate.
            • If you are running Operations Orchestration Load Balancer on the same system as Codar, select the CSA_JRE_HOME\lib\security directory, enter paslb.cer as the file name, and click Save.
            • If you are running Operations Orchestration Load Balancer on a system that is not running Codar, select a directory in which to store the certificate file, enter paslb.cer as the file name, and click Save.
         4. Click Next.
         5. Click Finish.
         6. Click OK.
      4. Click OK.

   If you are using a Firefox web browser, complete the following steps:

   1. Click Add Exception.
   2. In the Add Security Exception dialog, click View.

   3. In the Certificate Viewer, do the following:

      1. Select the Details tab.
      2. Click Export.
      3. Select a directory in which to save the certificate.
         • If you are running Operations Orchestration Load Balancer on the same system as Codar, select the
           CSA_JRE_HOME\lib\security directory, enter paslb.cer as the file name, select X.509 Certificate (PEM) as the Type, and click Save.
         • If you are running Operations Orchestration Load Balancer on a system that is not running Codar, select a directory in which to store the certificate file, enter paslb.cer as the file name, select X.509 Certificate (PEM) as the Type, and click Save.
      4. Click Close.
      5. Click Cancel.

    

   If you are using a Windows IE web browser, complete the following steps:

   1. In the address bar, click Certificate Error and select View certificates.
   2. In the Certificate Export Wizard, do the following:
      1. Select the Details tab.
      2. Click Copy to File.
      3. In the Certificate Export Wizard, do the following:
         1. Click Next.
         2. Select Base-64 encoded X.509 (.CER) and click Next.
         3. Click Browse and select a directory in which to save the certificate.
            • If you are running Operations Orchestration Load Balancer on the same system as Codar, select the CSA_JRE_HOME\lib\security directory, enter paslb.cer as the file name, and click Save.
            • If you are running Operations Orchestration Load Balancer on a system that is not running Codar, select a directory in which to store the certificate file, enter paslb.cer as the file name, and click Save.
         4. Click Next.
         5. Click Finish.
         6. Click OK.
      4. Click OK.

3. If you are running Operations Orchestration Load Balancer on a system that is not running Codar, copy the paslb.cer file to the CSA_JRE_HOME\lib\security directory on the system running Codar.

4. On the system running Codar, open a command prompt and run the following commands:

   Windows:

   cd "CSA_JRE_HOME\lib\security"

..\..\bin\keytool -importcert -alias paslb -file paslb.cer
-keystore cacerts -storepass <password>

   Linux:

   cd CSA_JRE_HOME/lib/security

../../bin/keytool -importcert -alias paslb -file paslb.cer
-keystore cacerts -storepass <password>

5. When prompted to trust the certificate, enter yes.