Https Communication and Security Certificates

Valuemation can 'communicate' with other servers. For example, with other Valuemation servers (Process Engine, CTI) or with the SMTP server when sending emails. When the secure communication is to be used, the certificates of the other servers must be trusted by Valuemation server.

Missing or invalid security certificates may hinder various areas of web client functionality. For instance, an invalid SSL certificate may cause empty InfoObjects or other non-standard InfoObject behaviour.

It's purely a java configuration which is not really related to Valuemation. The certificates must be trusted by the java running the Valuemation server.

For details, please see the http://www.grim.se website as an example.

Importing the Site Certificate into the Java Runtime Certificate Store

1. Get the target server certificate from the administrator of the server
2. Import the certificate to Java keystore file 'cacerts' found in the %JAVA_HOME%/jre/lib/security/ location.

   The following commands can be used:

   • To list certificates registred in cacerts (to check if the target server certificate is registered), run command

     keytool -list -keystore "%JAVA_HOME%/jre/lib/security/cacerts

   • To import the certificate, run command

     keytool -import -noprompt -trustcacerts -alias <AliasName> -file <certificate> -keystore <KeystoreFile> -storepass <Password>

   where:

   • <AliasName> - the name under which the certificate will be registered.
   • <certificate> - the binary source file of the certificate.
   • <KeystoreFile> - the file containing certificate keys (will be obtained with the certificate).