RE: HMC Wildcard Certificate - Java Keystore

I don't see any responses. Did you get it figured out?

I'm starting to run into the same issue.


--
Jim Oberholtzer
Agile Technology Architects


-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of
DrFranken
Sent: Wednesday, April 19, 2017 10:54 AM
To: Midrange Systems Technical Discussion
Subject: HMC Wildcard Certificate - Java Keystore

We are getting crap from providers now that having an HMC with a self signed
certificate is no longer acceptable. Such a device may be banned from their
equipment racks and it now violates various requirements.
It's not just the HMC of course it's IBM i, switches, firewalls, routers,
SANs, tape libraries, and the beat goes on.

Obtaining a separate key for every device in the DC is both expensive and a
management nightmare.

So a wildcard it is. Working in many places but from IBM: "the hmc does not
support adding a wildcard certificate."

There is a POSSIBLE workaround that involves creating a java keystore in jks
or pkcs12 format, importing the wildcard to that and then importing that
keystore into the HMC.

Has anyone experience with creating a Java Keystore that might have insights
into doing that? 'The Google' returns thousands of hits but they all seem to
think I'm a java expert to start with.

Anyone put a wildcard cert into their HMC??