Configuring secure communication between Control-M Workload Change Manager and an change manager system

This procedure describes how to configure a secure SSL connection between Control-M Workload Change Manager (WCM) and an external change management system.

To configure a secure SSL connection between WCM and an external change management system:

1. Ensure that the CN field of the SSL certificate for the external change manager contains the host name of the external server.
2. In the JRE bin directory of the EM, run the following command to check if the CA certificate is in the list of certificates trusted by BMC Software:
   • Windows: keytool -list -keystore ..\lib\security\cacerts
   • UNIX: ./keytool -list -keystore ../lib/security/cacerts

   NOTE: The default password of the keystore is changeit, unless you are using external Java.

3. If your CA certificate is not in the list of certificates trusted by BMC Software, then, in the JRE bin directory of the EM, import your own CA certificate:
   • Windows: keytool -importcert -file <path to certificate> -keystore ..\lib\security\cacerts -alias <certificate name>
   • UNIX: ./keytool -importcert -file <path to certificate> -keystore ../lib/security/cacerts -alias <certificate name>