Create TLS 1.2 Communication between IdentityIQ and IBM i system

Perform the following to enable TLS communication between IdentityIQ and the IBM i server, for securing TLS connection for IBM i system.

Note
For a Java client to connect using TLS and self-signed certificates, install the certificate into the JVM keystore.

  1. Export server certificate and copy the exported .cacrt file to the host running IdentityIQ.

  2. At the client computer execute the following command from the /jre/lib/security path:

    keytool -import -alias aliasName -keystore cacerts -trustcacerts -file <absolute path of certificate>

    In the preceding command line, aliasName is the name of the alias.

  3. Login to IdentityIQ.

  4. Create the application for IBM i by selecting Use TLS option and provide all the required values. For more information on creating the application, refer to Configuring the Connector in SailPoint.

  5. Select Test Connection and save the application.