Versions Compared

Old Version 2

changes.mady.by.user Brian Nordland

Saved on

compared with

New Version 3

changes.mady.by.user Brian Nordland

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The PowerHA web interface is configured automatically with the following settings:

...

Note

We recommend you configure the PowerHA webserver for secure HTTPS traffic. This ensures all information sent over the network is encrypted.

Various configuration options for the PowerHA Web Interface can be changed:

Table of Contents
minLevel1
maxLevel3

Starting and Ending the PowerHA Web Interface

...

Expand
titleCreating the *SYSTEM certificate store
Procedure

  1. In a web browser, enter http://mysystem:2001/dcm, where mysystem is the host name or IP address of the system. This opens IBM Digital Certificate Manager for i.

  2. Log in with an IBM i profile with sufficient authority.

  3. Click on Create Certificate Store on the left-hand navigation menu

  4. On the right-hand side of the page select *SYSTEM.

Info

Note: If the *SYSTEM option is not available in the list, it indicates that there is a *SYSTEM store already created on this system, and these steps have already been performed.

5. Create a password for the *SYSTEM store and click Create.

Info

Note: The password is case-sensitive. It is recommended not to use special characters. This password is not attached to a user profile and it will not lock you out of the system after too many attempts.

Result

The *SYSTEM certificate store is created on the node.

...

Expand
titleCreating the Local Certificate Authority
Procedure

  1. In a web browser, enter http://mysystem:2001/dcm, where mysystem is the host name or IP address of the system. This opens IBM Digital Certificate Manager for i.

  2. Log in with an IBM i profile with sufficient authority.

  3. Click on Create Certificate Store on the left-hand navigation menu.

  4. On the right-hand side of the page select Local CA.

Info

Note: If the Local CA option is not available in the list, it indicates that there is already a local certificate authority on this system, and these steps have already been performed.

5. Create a password for the Local CA store and click Create.

Info

Note: The password is case-sensitive. It is recommended not to use special characters. This password is not attached to a user profile and it will not lock you out of the system after too many attempts.

Result

The *SYSTEM certificate store is created on the node.

Expand
titleCreating a Certificate Authority (CA) Certificate
Procedure

  1. In a web browser, enter http://mysystem:2001/dcm, where mysystem is the host name or IP address of the system. This opens IBM Digital Certificate Manager for i.

  2. Log in with an IBM i profile with sufficient authority.

  3. In the left-hand menu, select Local CA

  4. If Local CA is not in the left-hand menu, open it by doing the following:

    1. Select Open Certificate Store.

    2. Enter the password for the local certificate authority, and click open.

    3. The Local CA will now automatically be selected in the left-hand menu.

  5. Under Certificate Authority (CA) Certificates, create one if one does not exist by selecting Create.

  6. Fill in the required fields. At a minimum:

    1. Common name: Provide a unique common name for this. For example: MyCompany MySystem CA

    2. Organization Name: Provide the name of your company

    3. State or Province: Provide the state or province of the system

    4. Country or Region: Provide the two character country code

      Image RemovedImage Added

  7. Click Create.

Result

The CA Certificate is created on the node.

...

Expand
titleAssigning the Certificate to the PowerHA Webserver
Procedure

  1. In a web browser, enter http://mysystem:2001/dcm, where mysystem is the host name or IP address of the system. This opens IBM Digital Certificate Manager for i.

  2. Log in with an IBM i profile with sufficient authority.

  3. In the left-hand menu, select the *SYSTEM certificate store.

  4. If the *SYSTEM certificate store is not in the left-hand menu, open the certificate store:

    1. Select Open Certificate Store in the left-hand menu.

    2. Select *SYSTEM on the right-hand side of the screen.

    3. Enter the password for the *SYSTEM certificate store.

    4. Click Open.

  5. Select Manage Application Definitions.

  6. Search for QIBM_QHASM_WEB.

  7. Click on the + symbol at the lower-right of the QIBM_QHASM_WEB box.

  8. Click on Assign Certificates.

  9. Check the box for the certificate you wish to assign, and click Assign.

    Image RemovedImage Added

Result

The certificate is now assigned to the PowerHA web interface

...

CHGHAWEB HTTPS(*SAME 12345)

Info

Note: The PowerHA HTTP server instance must be restarted after changing the port number.

...