Professional Documents
Culture Documents
Overview: Procedures of how to install digital certificates on WebLogic 6.1 for PeopleSoft application.
Description: All references to <webserver> refer to the machine and port that WebLogic Server 6.1
is installed to and running on.
Three fields that require special note are; “Full host name", "Private Key Password", "Random
string".
Field Description
Full host name The host name entered here, must mach the host name that clients will speci
URLs. If clients will specify a fully qualified domain name, then you'll need to
fully qualified domain name. (i.e crm.peoplesoft.com)
Private Key Password If you specify a Private Key Password you will need to enable the Key Encrypt
the SSL tab of the Server window in the Administration console.
Random string An optional string used to add an external factor to the encryption algorithm.
production web servers the use of a random string is highly recomme
on the following
http://developer.bea.com/code/security_011109.jsp
6) Decide which Certificate Authority you wish to use, and then following the
appropriate section below.
8) Install the CA's certificate: Obtain the root certificate of the CA which
processed your request.
If you used the above listed Microsoft CA, you can download it's certificate from
http://ptntas12/certsrv/certcarc.asp. Select the 'DER' encoding method, click the 'Download CA
certificate' link and save it to disk as c:\bea\wlserver6.1\config\peoplesoft\PTNTAS12.cer. For
UNIX, ftp the CA certificate in binary to your /apps/bea/wlserver6.1/config/peoplesoft/ directory.
----------------------------------------------------------------------------------------------------------------
--------------------------------------
14) Submit your certificate request to Verisign. (Don't use the Verisign
button)
The Verisign button provided by BEA on the "BEA WebLogic Server Certificate Request
Generator" does not work. To install a Verisign test certificate, access VeriSign's test cert enrollment
site at https://www.verisign.com/products/srv/trial/intro.html.
Copy the certificate information, including --BEGIN CERTIFICATE-- and --END CERTIFICATE-- and
save it as a file called c:\bea\wlserver6.1\config\peoplesoft\<webserver>-cert.pem. (Do not use
a word processor such as MSWord that inserts formatting or control characters.) If you need to
FTP your certificate to UNIX, you must FTP it in ASCII mode.