You’ll need to set up a keystore if one hasn’t been provided already.
If you have a Root CA that you use within your organisation, then you may need to get a keystore set up for yourself, and your vendor (one for your server, one for the vendor).
If the vendor is providing the certificates, then request that they provide you with a keystore or sign a Certificate Signing Request.
The keystore will need at minimum:
A signed private key alias
A root ca certificate alias
To set up in CAA-WS:
For the server add a new engine that is TLS secured and fill in the Keystore information.
For the client add a new http conduit that is TLS secured and fill in the Truststore information.
If you have the keystore file with both the private and ca alias, the same keystore can be used for both.
Set the permissions of the keystore so that only the hci user can access the file (or whichever user you use for your sites).
.
