Ports and Services for IBM i

After changing your Apache's port setting to another port, change the User Interface's port setting as follows:

1. Enter: STRZS7 or GO ZENDPHP7/ZSMENU.

2. Select Option 15 to update httpd.conf file.

3. Restart Apache.

You can also use IBM's "Web Administration for i5/OS" which will be running on port 2001 (http://<YOUR_IP>:2001.

Step 1: Downloading your SSL Certificate and its intermediate CA certificate:

1. If you had the option of server type during enrollment and selected Other you will receive a x509/.cer/.crt/.pem version of your certificate within the email. Alternately you can access your Certificate User Portal by the supplied link in the email to pick up the x509 version of your certificate.

2. Copy the SSL certificate, making sure to copy the —–BEGIN CERTIFICATE—– and —–END CERTIFICATE—– header and footer. Ensure there are no white spaces, extra line breaks, or additional characters.

3. Use a plain text editor to paste the content of the certificate into a new file and save it with extension .txt

4. If your intermediate CA certificate for your product is not in the body of the email, you can access your Intermediate CA from a link within that email. Copy and paste the contents of your Intermediate CA into its own file and save it with a .txt extension also.

   Note:

   Some CAs may require two intermediates for best compatibility. Copy these two within their own corresponding .txt files and install them one at a time.

Step 2: Installing your intermediate CA:

1. Start Digital Certificate Manager (DCM).

2. From the navigation panel, click Select a Certificate Store then select *SYSTEM.



3. Enter the password for the Certificate Store and click Continue.

4. From the navigation panel, select Manage Certificates.

5. From the list, select Import Certificate > Certificate Authority (CA) then click Continue.



6. On the next screen specify the path and file name of your intermediate CA .txt file and click Continue.



7. Specify a name for your imported intermediate CA.



8. Click Continue.

9. A message appears stating the intermediate CA certificate has been imported. Click OK.

The intermediate CA certificate is now installed.

Note:

If you receive a error stating “The issuer of this certificate could not be found” or “The issuer of the certificate may not be in the certificate store” this is due to a missing Root certificate for your SSL/Intermediate that is required on the system. Getting your Root CA will vary and you may have to consult your CA in order to get this. The SSL Support Desk features intermediates and roots from the following big CAs. It must be in its own .txt file. Repeat step 2 to import your root and then your intermediate.

Step 3: Installing the SSL Certificate:

1. Start Digital Certificate Manager (DCM).

2. From the navigation panel, click Select a Certificate Store then select *SYSTEM.

3. Enter the password for the Certificate Store and click Continue.

4. From the navigation panel, select Manage Certificates.



5. From the list, select Import Certificate then select Server or Client.

6. On the next screen specify the path and file name of your SSL Certificate .txt file, and click Continue.

Step 4: Assigning your SSL certificate:

1. In the navigation frame, select Manage Applications to display a list of tasks.

2. From the task list, select Update Certificate Assignment to display a list of SSL-enabled applications for which you can assign a certificate.

3. Select an application from the list and click Update Certificate Assignment.

4. Select the certificate that you imported and click Assign New Certificate. The DCM displays a message to confirm your certificate selection for the application.

For more information consult the IBM Knowledge Center.