How to change the CN for TBSM and ImpactUI root certificate when changing the hostname of the TBSM and Impact server?

When you change the hostname on the Impact/TBSM server, you should run the "nci_changehost" command.

The "nci_changehost" will change the hostname in the key files, that is in the files:

/opt/IBM/tivoli/impact/wlp/usr/servers/ImpactUI/resources/security/key.jks

/opt/IBM/tivoli/impact/wlp/usr/servers/TBSM/resources/security/key.jks

You can examine this, by looking into the key.jks files, run the below command to check:

/opt/IBM/tivoli/impact/sdk/jre/bin/keytool -list -keystore key.jks -v -storepass {impactadmin_password}

 whether the new hostname is already in the key files.

If the new hostname is not in the key files, you may do:

• delete the key.jks file
• recreate the key.jks file, by Generating certificate
• you may refer to /opt/IBM/tivoli/impact/install/tools/change_hostport.xml file, for details of arguments to the keytool command

From Jazz admin console, you may delete the cert that you like to delete from the NodeDefaultTrustStore.

Then Retrieve from port in NodeDefaultTrustStore signer certificate. You can refer to: https://www.ibm.com/support/knowledgecenter/SSSPFK_6.2.0/com.ibm.tivoli.itbsm.doc/installguide/bsma_secc_con_certificate.html

(1) From JAZZ, in SSL certificate setting; obtain from port in NodeDefaultTrustStore signer certificate.

(2) After it is obtained, delete the old NodeDefaultTrustStore signer certificate