Configure Data Admin to Trust a Custom Certificate Authority

You can configure Data Admin to accept additional Certificate Authority (CA) certificates, beyond the standard ones. This configuration is necessary only when you have configured your components to use TLS certificates signed by a custom CA.

To configure Data Admin to use a custom CA

1. Create a truststore file that contains the CA certificate chain. The truststore is the same type of file as a keystore file (see Configure Data Admin to Use SSL). You can create one by using keytool, which comes with JRE. For example:

   keytool -keystore '.../output-truststore.jks' -importcert -file '.../ca.cert.pem'

   NOTE: Data Admin trusts only trust certificates in this store. If you also want to trust the standard CAs, you must add them manually. For example, you can copy the truststore from your JRE and add your custom CAs to it.

2. When starting Data Admin, set the Java system property javax.net.ssl.trustStore to the location of your truststore. For more information about using Java system properties, see Using Java System Properties.