Before you can enable SSL on WebSphere, you must have your own certificate. This certificate can be a self-certificate for testing purpose but in any production case, you should have a certificate issued by a Trusted CA.

You can find the files required for installation in Account manager, either by downloading the zip file or by downloading them individually from the individual file download section.

The following steps describe how to get your own certificate and later how to configure WebSphere to use it.

Installing a certificate chain

Before you can add your certificate into the keystore, you must first include the certificates chain. You must install the following public certificates:

You can add the certificates chain from the Signer Certificates screen.

Click Add.... A dialog box will appear where you have to enter the data, the Certificate file name (the certificate file you received) and its location. Once all of this information is entered click on OK.

Installing your site certificate

You can import the site certificate into your keystore easily. After opening the IBM Key Management console, please select the option 'Personal Certificates' in the drop down within the 'Key Database Content' area.

Once you've selected 'Personal Certificates', please click Receive. A dialog box will appear in which you must enter the data required, the certificate file name (the certificate file you received) and its location. Once all of this information is entered click OK. This will configure your keystore correctly.

Enabling SSL

Once your keystore has been successfully configured with your certificate, you can enable SSL in WebSphere Application Server.