. RE: Configure new Navigator for TLS but doesn't come up on -- MIDRANGE-L

Try this .....
https://www.ibm.com/docs/en/i/7.5?topic=security-digital-certificate-manager

Respectfully,
Michael Mayer
IBM i on Power System Admin
ERMCO-ECI
2225 Industrial Rd
Dyersburg, Tennessee 38024
Office and OnCall: 731.676.4318
Cell: 518.641.8906
Email: michael.mayer@xxxxxxxxxxxxx
https://www.ermco-eci.com/
IBM i Personal Blog: https://ibmireference.blogspot.com/
"Success is not final. Failure is not fatal. It is the courage to continue that counts".

5. RE: Configure new Navigator for TLS but doesn't come up on
TLS port (stefan@xxxxxxxxxx)

----------------------------------------------------------------------

------------------------------

message: 5
date: Wed, 17 Jan 2024 16:41:47 +0100
from: <stefan@xxxxxxxxxx>
subject: RE: Configure new Navigator for TLS but doesn't come up on
TLS port

I am looking for another IBM document, but this one discuss how to reset/renew the DCM system store password:
https://www.ibm.com/docs/en/i/7.5?topic=dcm-backup-recovery-considerations-data

Will continue looking

Best regards

Stefan

--
No trees were killed in the sending of this message, but a large number of electrons were terribly upset.

Stefan Tageson
+46 732 369934
stefan@xxxxxxxxxx

-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Jack Woehr via MIDRANGE-L
Sent: Wednesday, January 17, 2024 4:31 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Cc: Jack Woehr <jwoehr@xxxxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: Configure new Navigator for TLS but doesn't come up on TLS port

Aha! You're right, Stefan!

[1/16/24 21:16:49:247 EST] 0000002d com.ibm.ws.ssl.config.WSKeyStore
E CWPKI0033E: The keystore located at /QIBM/USERDATA/ICSS/CERT/Server/DEFAULT.KDB did not load because of the following error: password must be specified
[1/16/24 21:16:49:291 EST] 0000002d com.ibm.ws.ssl.config.WSKeyStore
W CWPKI0809W: There is a failure loading the KeyStoreByWebAdmin keystore. If an SSL configuration references the KeyStoreByWebAdmin keystore, then the SSL configuration will fail to initialize.
[1/16/24 21:16:49:298 EST] 0000002d com.ibm.ws.ssl.config.WSKeyStore
I CWPKI0819I: The default keystore is not created because a password is not configured on the <keyStore id="defaultKeyStore"/> element, and the 'keystore_password' environment variable is not set.
[1/16/24 21:16:49:304 EST] 0000002d com.ibm.ws.ssl.config.WSKeyStore
E CWPKI0033E: The keystore located at /QIBM/USERDATA/ICSS/CERT/Server/DEFAULT.KDB did not load because of the following error: password must be specified
[1/16/24 21:16:49:306 EST] 0000002d com.ibm.ws.ssl.config.WSKeyStore
W CWPKI0809W: There is a failure loading the
KeyStoreByWebAdmin1 keystore. If an SSL configuration references the
KeyStoreByWebAdmin1 keystore, then the SSL configuration will fail to initialize.

How do I provide the password? I saw nothing in the configuration wizard about that.

On Wed, Jan 17, 2024 at 8:24?AM <stefan@xxxxxxxxxx> wrote:

Good starting point.
Anything ugly in the logs here:

/QIBM/UserData/OS/ADMININST/admin1/wlp/usr/servers/admin1/logs/

--

*JACK WOEHR, IBM Champion 2021-2023
<https://www.credly.com/users/jack-woehr/badges>*

*SENIOR IBM i ENGINEER*

303.847.8442
jwoehr@xxxxxxxxxxxxxxxxxxxxxxxx
<https://www.linkedin.com/in/jackwoehr/> stay connected <https://www.linkedin.com/company/absolute-performance-inc./>

<https://www.absolute-performance.com/>
http://www.absolute-performance.com/