User guide

Chapter 7: Setting and Use of the Interstage Certificate Environment
7-10
The services listed below are concerned:
− Interstage SOAP Service
− Smart Repository (If using SSL is defined in the Replication Connection Settings in master of
replication mode)
− CORBA Service (client-sided setting when SSL linkage is in use, if client authentication is not to
be performed)
− Servlet Service (SSL communication setting on the Web server connector side when Web server
and WorkUnit are not on the same machine)
− Interstage HTTP Server (when SSL communication with a directory server on another system is
set for the online access management function)
Requesting Certificate Issuance
Request the CA to issue a certificate, and obtain a certificate.
Requesting Certificate Issuance
Send the CSR created with the scsmakeenv command to the CA to request certificate issuance. Follow
the request procedure specified by the CA.
Obtaining a Certificate
Obtain a certificate in binary data (DER) format or Base64 encoding data (PEM) format from the CA.
A certificate in PEM format is shown below:
-----BEGIN CERTIFICATE-----
(Base-64-encoded certificate data is embedded.)
-----END CERTIFICATE-----
Follow the acquisition procedure specified by the CA.
Registering Certificates and CRL
Register the certificates and CRL obtained from the CA in the Interstage Certificate Environment.
Register the CA certificate first.
Note
After registering the obtained certificates and CRL, be sure to make a backup of the Interstage
Certificate Environment. Refer to Operator's Guide for details of the backup procedure.
When you make no backup of the Interstage certificate environment, you need to again create the
Interstage certificate environment and create a CSR and request certificate issuance, if the Interstage
certificate environment is damaged.