Locating the keystore files

To locate the keystore files, run the showSecurityProperties utility, described in the following section: Security properties: reference. Then make any changes to the name, location, password of the HCL Workload Automation server key or truststores, you must modify the configuration files which describe them.

Client key files for all components

The client key files for HCL Workload Automation master are described in the file: TWA_home/WAS/TWSprofile/properties/ssl.client.props. The client key files for the Dynamic Workload Console are described in the file:JazzSM_profile_dir/properties/ssl.client.props .

An example of it is as follows:

# KeyStore information
com.ibm.ssl.keyStoreName=ClientDefaultKeyStore
com.ibm.ssl.keyStore=/opt/hcl/TWA0/WAS/TWSprofile/etc/
                                             TWSClientKeyFile.jks
com.ibm.ssl.keyStorePassword={xor}Ozo5PiozKw\=\=
com.ibm.ssl.keyStoreType=JKS
com.ibm.ssl.keyStoreProvider=IBMJCE
com.ibm.ssl.keyStoreFileBased=true

# TrustStore information
com.ibm.ssl.trustStoreName=ClientDefaultTrustStore
com.ibm.ssl.trustStore=/opt/hcl/TWA0/WAS/TWSprofile/etc/
                                             TWSClientTrustFile.jks
com.ibm.ssl.trustStorePassword={xor}Ozo5PiozKw\=\=
com.ibm.ssl.trustStoreType=JKS
com.ibm.ssl.trustStoreProvider=IBMJCE
com.ibm.ssl.trustStoreFileBased=true

To modify the server key file names, paths, or passwords, modify the configuration files using the script changeSecurityProperties located in the TWA_home/TWS/wastool directory. For instructions on how to do this see Changing the security settings. The following is a sample of the input:

################################################################
SSL Panel
################################################################
alias=DefaultSSLSettings
keyFileName=${USER_INSTALL_ROOT}/etc/TWSServerKeyFile.jks
keyFilePassword=*****
keyFileFormat=JKS
trustFileName=${USER_INSTALL_ROOT}/etc/TWSServerTrustFile.jks
trustFilePassword=*****
trustFileFormat=JKS
clientAuthentication=false
securityLevel=HIGH
enableCryptoHardwareSupport=false

The following table show the old and new name and path of HCL Workload Automation and Dynamic Workload Console certificates.