10.1.3. Creating Certificates

Engineering Knowledge Manager

Installation Guide | Chapter 10: Installing and Configuring EnginFrame | 10.1. Installing EnginFrame |

10.1.2. Setting Up Self-Signed Certificates for Client-Server Authentication |  | 10.1.4. Configuring Keystore and Truststore on the EnginFrame Server
Prev |  | Next

### 10.1.3. Creating Certificates

Follow the steps below to create self-signed certificates to be used by the EnginFrame server and EnginFrame Client Web Services library.

If you have a valid Certification Authority we recommend that you create CA-signed certificates instead of self-signed ones.

In this example, the client is the EKM server, and the following generic values are used:

- Password: `ekmansys`

- Hostname of the EnginFrame host: `enginframe.domainname.com`

- Hostname of the client where the Web Service Library will be used: `ekmServer.domainname.com`

The keystore.utils.sh script is used to create self-signed certificates. In order to use it, export the following two variables, one with the Java Home path and the other with the user designed as the TOMCAT_USER during the EnginFrame installation:

`export JAVA_HOME=/usr/java/jdk1.8.0_121/ export TOMCAT_USER=efnobody`

To generate the self-signed certificate use the following command:

`echo `ekmansys` | sh keystore.utils.sh - generate `enginframe.domainname.com` `ekmServer.domainname.com``

If the EKM server is a multi-node server, provide the host names of all cluster nodes, ensuring that the node names are enclosed in a set of single quotation marks, with each name separated by a space:

`echo "ekmansys" | sh keystore.utils.sh - generate ‘`enginframe.domainname.com`’ ‘`ekmServer1.domainname.com ekmServer2.domainname.com ekmServer3.domainname.com`’`

Important: Make note of your password (`ekmansys` in the example) as you will need it when configuring EKM. See Configuring EKM to Work with EnginFrame.

The certificates will be generated under the certificates folder in the current working directory:

    -rw-r--r--   1 efnobody  root   891B 22 Lug 11:52 enginframe.domainname.com.ef.cer
    -rw-------   1 efnobody  root   2,2K 22 Lug 11:52 enginframe.domainname.com.ef.keystore
    -rw-r--r--   1 efnobody  root   1,0K 22 Lug 11:52 enginframe.domainname.com.ef.truststore
    -rw-r--r--   1 efnobody  root   925B 22 Lug 11:52 ekmServer.domainname.com.client.cer
    -rw-------   1 efnobody  root   2,2K 22 Lug 11:52 ekmServer.domainname.com.client.keystore
    -rw-r--r--   1 efnobody  root   958B 22 Lug 11:52 ekmServer.domainname.com.client.truststore
    -rw-------   1 efnobody  root    59B 22 Lug 11:52 keystore.password

Contains proprietary and confidential information of ANSYS, Inc. and its subsidiaries and affiliates.

Prev | Up / Contents | Next

Release 18.2 - © ANSYS, Inc. All rights reserved.