Importing a security certificate in Rule Designer

To be able to securely connect your Rule Designer to the Decision Server and Decision Center components that are running in IBM Cloud Private, you need to establish a TLS connection through a security certificate. You import the security certificate into the JVM's cacerts file that is used to start Rule Designer.

About this task

ODM on IBM Cloud Private is delivered with a default certificate, odmonicpserver.cer, available here https://github.com/ODMDev/ruledesigner/raw/master/odmonicpserver.cer. To connect to an ODM component with this certificate, you must copy the file to the JVM used to start Rule Designer, or use the truststore.jks file, available here https://github.com/ODMDev/ruledesigner/raw/master/truststore.jks. This truststore file already contains the odmonicpserver.cer certificate.

When you decide to replace the default certificate with your own, see Defining the security certificate.

Procedure

To import a certificate into the JVM, use the keystore keytool.
The following example uses the default odmonicpserver.cer certificate and the default cacerts truststore.
```
cd <JAVA_HOME>/jre/lib/security
keytool -importcert -file odmonicpserver.cer -keystore cacerts -storepass changeit -alias odmicpserver
```
Where changeit is the fixed password that is used to protect the integrity of the cacerts file.
If you prefer to use the truststore (which integrates the certificate), proceed as follows:
1. Copy the truststore.jks file to your Rule Designer installation directory next to the eclipse.ini file.
2. Add the SSL properties at the end of your eclipse.ini file. To use the default security certificate, enter the following lines:
```
-Djavax.net.ssl.trustStore=truststore.jks
-Djavax.net.ssl.trustStorePassword=changeme
```
  Where changeme is the fixed password to be used for the default truststore.jks file.
  
  To use another security certificate, enter the following lines:
```
-Djavax.net.ssl.trustStore=truststore.jks
-Djavax.net.ssl.trustStorePassword=truststorePwd
```
  Where truststorePwd is the password that you define for your truststore.jks file.
Restart Rule Designer.

What to do next

Test the connection between Rule Designer and Decision Center to make sure you are able to publish a decision service.