User guide

Chapter 2: Environment Setup (SSO Administrators)
2-68
Is <CN=authenticate_server.fujitsu.com, OU=FUJITSU TOKYO, O=FUJITSU,
L=Shinjuku, ST=Tokyo,C=jp> correct?
[no]: yes
UX:SCS: INFO: scs0101: CSR was issued </tmp/ssocert.txt>
UX:SCS: INFO: scs0180: The owners group of Interstage certificate
#
When the scsmakeenv command is terminated normally, the CSR is output to the file specified with the -
f option of the scsmakeenv command. Send the file to the certificate authority and request to issue the
CSR. The requesting method depends on the certificate authority.
Registering the Certificates for SSL Communication
The site certificate issued by a certificate authority and the CA certificate of the certificate authority that
issued the site certificate must be acquired and registered.
Use the certificate and CRL registration command (scsenter) to register these certificates.
In the scsenter command, specify the passwords and certificate nicknames that are specified in the
scsmakeenv command for access to the Interstage certificate environment. To register the site
certificate that was acquired from the certificate authority, use the scsmakeenv command to specify the
nickname specified in the private-key. Be sure to specify the -o option for registering the site certificate.
Refer to 'SSL Commands' in Reference Manual (Command Edition) for details of the scsenter command.
Example
CA certificate: 'C:\WINNT\temp\ca-cert.cer'
CA Certificate Nickname: 'CACERT'
Site certificate: 'C:\WINNT\temp\server-cert.cer'
Site Certificate Nickname: 'SERVERCERT'
The following shows an example of the scsenter command in which C:\WINNT\temp\ca-cert.cer is
specified as the CA certificate and C:\WINNT\temp\server-cert.cer is specified as the site certificate.
Change the file path of each certificate when necessary.
When password entry is requested, enter the password for access to the Interstage certificate
environment. The entered password is not displayed.
C:\>scsenter –n CACERT –f C:\WINNT\temp\ca-cert.cer
Password:
Certificate was added to keystore
SCS: INFO: scs0104: Certificate was imported
C:\>scsenter –n SERVERCERT –f C:\WINNT\temp\server-cert.cer –o
Password:
Certificate reply was installed in keystore
SCS: INFO: scs0104: Certificate was imported
C:\>