Apply own p12 certificate in place of the default CA Embedded Entitlements Manager (EEM) certificate
book
Article ID: 18977
calendar_today
Updated On:
Products
CA IT Asset ManagerCA Service Desk ManagerCA Service Management - Asset Portfolio ManagementCA Service Management - Service Desk ManagerCA Process Automation BaseCA Service Catalog
Issue/Introduction
This document outlines the step by step instructions to replace the default CA Embedded Entitlements Manager (EEM ) certificate with your own p12 certificate issued by a certified vendor such as VeriSign.
Environment
Embedded Entitlements Manager (EEM/EIAM) release 12.5 and higher
Resolution
In order to replace the default CA Embedded Entitlements Manager (EEM ) certificate with your own p12 certificate, follow the steps below:
Copy your p12 certificate to iTechnology folder. (e.g. \Program Files\CA\SharedComponents\iTechnology or Program Files\CA\SC\iTechnology)
Stop the CA iTechnology iGateway service.
Edit \Program Files\CA\SharedComponents\iTechnology\igateway.conf and update the <Connector name="defaultport"> section
-Set certType to p12
-Set certURI to your .12 certificate filename, e.g eem.p12.
IMPORTANT: save, then close the igateway.conf file at this time. This is because the next step will continue to modify the igateway.conf file to update with your encrypted certificate password. We will open the file once more to confirm all changes have been made.
Run ConfigTool command to set the certPW tag to the munged (encrypted) password as per below.
What this command does is update the igateway.conf file such that the "certPW" tag is updated with the encrypted password. The input password in the above command example is "password1234".
Open the igateway.conf file to confirm the changes have been made per the above. Save/close the file.
Start the CA iTechnology iGateway service
Additional Information
Please see KB Article 276143 for corresponding instructions on using a pem and key certificate (no password needed)