Changing Oracle Identity Manager Passwords in the Credential Store Framework

12-10 Oracle Fusion Middleware Administrators Guide for Oracle Identity Manager ■ Generating Keys ■ Signing the Certificates ■ Exporting the Certificate ■ Importing the Certificate ■ Enabling SSL for Oracle Identity Manager and SOA Servers ■ Enabling SSL for Oracle Identity Manager DB ■ Enabling SSL for LDAP Synchronization

12.3.1 Generating Keys

You can generate private and public certificate pairs by using the keytool command. The following command creates an identity keystore support.jks: keytool -genkey -alias support -keyalg RSA -keysize 1024 -dname CN=localhost, OU=Identity, O=Oracle Corporation,C=US -keypass weblogic1 -keystore support.jks -storepass weblogic1

12.3.2 Signing the Certificates

Use the following keytool command to sign the certificates that you created: .keytool -selfcert -alias support -sigalg MD5withRSA -validity 2000 -keypass weblogic1 -keystore support.jks -storepass weblogic1

12.3.3 Exporting the Certificate

Use the following keytool command to export the certificate from the identity keystore to a file, for example, supportcert.pem: .keytool -export -alias support -file supportcert.pem -keypass weblogic1 -keystore support.jks -storepass weblogic1 Note: Change the parameter values passed to the keytool command according to your requirements. Ensure that there is no line break in the keytool argument. Note: Change the parameter values passed to the keytool command according to your requirements. Ensure that there is no line break in the keytool argument. Handling Lifecycle Management Changes 12-11

12.3.4 Importing the Certificate

Use the following keytool command to import the certificate from a file, such as wlservercert.pem, to the identity keystore: keytool -import -alias serverwl -trustcacerts -file D:\bea\user_projects\domains\mydomain\wlservercert.pem -keystore CLIENT_TRUST_STORE -storepass CLIENT_TRUST_STORE_PASSWORD

12.3.5 Enabling SSL for Oracle Identity Manager and SOA Servers

You need to perform the following configurations in Oracle Identity Manager and SOA servers to enable SSL: ■ Enabling SSL for Oracle Identity Manager By Using Default Setting ■ Enabling SSL for Oracle Identity Manager By Using Custom Keystore ■ Changing OimFrontEndURL to Use SSL Port ■ Changing backOfficeURL to Use SSL Port ■ Changing SOA Server URL to Use SSL Port ■ Configuring SSL for Design Console ■ Configuring SSL for Oracle Identity Manager Utilities ■ Configuring SSL for MDS Utilities ■ Configuring SSL for SPMLCallback Domain

12.3.5.1 Enabling SSL for Oracle Identity Manager

Enabling SSL for Oracle Identity Manager is described in the following sections: ■ Enabling SSL for Oracle Identity Manager By Using Default Setting ■ Enabling SSL for Oracle Identity Manager By Using Custom Keystore

12.3.5.1.1 Enabling SSL for Oracle Identity Manager By Using Default Setting

To enable SSL for Oracle Identity Manager and SOA servers by using default setting: 1. Log in to WebLogic Server Administrative console and go to Servers, OIM_SERVER1, General. Under the general section, you can enable ssl port to any value and activate it. 2. The server will start listening and you can access the URL with HTTPS protocol. 3. Perform the same steps for AdminSOA Servers as Oracle Identity Manager might need to interact with SSL-enabled SOA Server.

12.3.5.1.2 Enabling SSL for Oracle Identity Manager By Using Custom Keystore

To enable SSL for Oracle Identity Manager by using custom keystore: