Importing Java Development Kit Certificates

After you install an Agent, if the machine or server that you installed the Agent to uses a Hypertext Transfer Protocol Secure (HTTPS) URL to access the machine or server that contains your PLM or the machine or server that you created the File System aP Connect Root Folder on, you must import certain Java Development Kit (JDK) certificates to the Agent machine.

Note:

The JDK is packaged in the zipped installer folder. Obtain certificates from your PKI/security team, or (for example) export them from the Windchill URL, with a browser (view the site certificate, then export each certificate in the chain) or with openssl s_client -connect <windchill-host>:443 -showcerts CLI command.

Before you import the JDK certificates, stop the Agent service. For more information, see Stop, Start, or Restart an Agent.

For a Java tutorial that shows how to prepare, export, and import certificates, see https://docs.oracle.com/javase/tutorial/security/toolfilex/receiver.html.

After you import the JDK certificates, restart the Agent service. For more information, see Stop, Start, or Restart an Agent.