Maximo Application Suite Customer-managed

Enabling manual certificate management

By default, Maximo® Application Suite uses IBM® Certificate Manager to automatically control certificate management. To upload your own public transport layer security (TLS) certificates, you must first enable manual certificate management by updating the custom resource (CR) file for Maximo Application Suite.

About this task

Enabling certificate management manually is available to upload public TLS certificates. Internal certificates are still created and managed by using IBM Certificate Manager.

Procedure

  1. In the Red Hat® OpenShift® Container Platform console, in the Administration section, select Custom Resource Definitions.
  2. In the CustomResourcesDefinitions window, select the Suite CR file.
  3. In the CustomResourcesDefinitions window, on the Instances tab, select the instance that you want to update.
  4. On the YAML tab for the instance, in the spec.settings section, change the manualCertMgmt variable from False to True.
  5. Validate that the spec.settings.manualCertMgmt setting is True.
  6. Save the CR changes.

Results

You can add certificates by updating the secret names in the namespace of each cluster or uploading the certificates in the Maximo Application Suite user interface.

To upload in the user interface, log in to Maximo Application Suite and select the Suite administration page. You can upload the certificates on the Certificates page or when you initially deploy and activate applications.

To revert to controlling certificates automatically by using IBM Certificate Manager, you can change the manualCertMgmt to False. By switching to automatic certificate management, the certificates that you uploaded manually are replaced and cannot be retrieved from the system. If you change back to manual certificate management, you must upload your certificates again.