You need the password for the certificate keystore.
Log in to the CMS server with root privileges.
Run the cmsadm command.
Enter the number associated with the run_cms option.
Enter 2 to turn off CMS but leave IDS running.
Run the /cms/install/bin/ids_tls_configure -u command.
ADDITIONAL INFORMATION:
If Informix network encryption is not enabled, the output displays a message such as the following:
Informix encryption(TLS/SSL) enable started. Provide the PKCS12 certificate for configuring TLS/SSL.
ADDITIONAL INFORMATION:
If Informix network encryption is enabled, the output displays a message such as the following:
You are about to replace the existing Informix encryption(TLS/SSL) certificate. Do you want to proceed? (y/n):
Enter y.
ADDITIONAL INFORMATION:
The output displays the following:
Informix encryption(TLS/SSL) certificate update started. Provide the PKCS12 certificate for updating TLS/SSL.
Enter the path on the CMS server where you saved your certificate.
ADDITIONAL INFORMATION:
If the certificate file is not accessible, a message such as the following is displayed:
The certificate file (/storage/my_cert.p12) does not exist. Please verify file location and read permissions exist, then re-enter.
Enter the password for the certificate keystore.
ADDITIONAL INFORMATION:
If a certificate validation error is encountered, the error is reported and encryption is not enabled. The following are examples of error messages you might see if the validation fails:
Certificate validated. Informix encryption(TLS/SSL) configuration completed. IDS is restarting. Informix encryption(TLS/SSL) enable complete. Informix network connections are now encrypted.The provided certificate is not PKCS12 format. CERTIFICATE_TYPE Please make sure your certificate meets the requirements in the CMS ODBC/JDBC document, then re-execute ids_tls_configure The provided certificate does not include the required alias: cms_net_encrypt. Certificate alias: ALIAS. Please make sure your certificate meets the requirements in the CMS ODBC/JDBC document, then re-execute ids_tls_configure.
Run the cmsadm command.
Enter the number associated with the run_cms option.
