Updating the Informix network encryption certificate

Last Updated : Sep 26, 2024 |

Before you begin

Informix network encryption must be enabled.

Note the following for the customer-provided certificate:

Procedure

  1. Log in to the CMS server with root privileges.
  2. Run the cmsadm command.
  3. Enter the number associated with the run_cms option.
  4. Enter 2 to turn off CMS but leave IDS running.
  5. Run the /cms/install/bin/ids_tls_configure -u command.

    If Informix network encryption is not enabled, the output displays a message such as the following:

    Informix encryption(TLS/SSL) enable started.
    Provide the PKCS12 certificate for configuring TLS/SSL.

    If Informix network encryption is enabled, the output displays a message such as the following:

    You are about to replace the existing Informix encryption(TLS/SSL) 
    certificate.
    Do you want to proceed? (y/n):
  6. Enter y.

    The output displays the following:

    Informix encryption(TLS/SSL) certificate update started.
    Provide the PKCS12 certificate for updating TLS/SSL.
  7. Enter the path on the CMS server where you saved your certificate.

    If the certificate file is not accessible, a message such as the following is displayed:

    The certificate file (/storage/my_cert.p12) does not exist.
    Please verify file location and read permissions exist, then re-enter.
  8. Enter the password for the certificate keystore.

    If a certificate validation error is encountered, the error is reported and encryption is not enabled. The following are examples of error messages you might see if the validation fails:

    Certificate validated. Informix encryption(TLS/SSL) configuration completed. IDS is restarting.
    Informix encryption(TLS/SSL) enable complete.
    Informix network connections are now encrypted.
    The provided certificate is not PKCS12 format. CERTIFICATE_TYPE
    Please make sure your certificate meets the requirements in the CMS ODBC/JDBC
    document, then re-execute ids_tls_configure
    The provided certificate does not include the required alias: cms_net_encrypt.
    Certificate alias: ALIAS. Please make sure your
    certificate meets the requirements in the CMS ODBC/JDBC document,
    then re-execute ids_tls_configure.
  9. Run the cmsadm command.
  10. Enter the number associated with the run_cms option.
  11. Enter 1 to turn on CMS.

Next Steps

After the Informix encryption certificate is updated, ensure that the latest certificate is also available on the computer where the ODBC and JDBC software is installed. For more information, see Updating the Informix encryption certificate on a Windows computer.