Create TLS 1.2 Communication between IdentityIQ and IBM i system
Perform the following to enable TLS communication between IdentityIQ and the IBM i server, for securing TLS connection for IBM i system.
Note
For a Java client to connect using TLS and self-signed certificates, install the certificate into the JVM keystore.
-
Export server certificate and copy the exported
.cacrt
file to the host running IdentityIQ. -
At the client computer execute the following command from the
/jre/lib/security
path:keytool -import -alias aliasName -keystore cacerts -trustcacerts -file <absolute path of certificate>
In the preceding command line, aliasName is the name of the alias.
-
Login to IdentityIQ.
-
Create the application for IBM i by selecting Use TLS option and provide all the required values. For more information on creating the application, refer to Configuring the Connector in SailPoint.
-
Select Test Connection and save the application.