Appendix C - Installing SSL Certificate for WMS

This appendix describes how to install SSL certificate for web map service (WMS).

If you are adding a HTTPs WMS URL which uses a SSL certificate that is not trusted by Spectrum Spatial Analyst server, you need to install the root certificate or any intermediate certificates for corresponding certificate authority in Spectrum Spatial Analyst trust store. Spectrum Spatial Analyst server by default makes use of default JDK trust store file cacerts found in JDK directory.

Perform the steps given below to import the certificates.
  1. Get a root/intermediately certificates from your certificate authority and save it. For example, you can save it as Example_SSL_CA_G2.cer.
  2. Backup cacerts keystore file in %JAVA_HOME%/jre/lib/security.
  3. Open a Command prompt as administrator.
  4. Import certificate into cacerts. Now, execute below command after replacing the values in <>:
    "%JAVA_HOME%/bin/keytool" -import -alias <alias_for_CA_certificate> -keystore <path_to_cacerts> -trustcacerts -file <path_to_root_certificate>

    A sample command looks like: 

    "%JAVA_HOME%/bin/keytool" -import
        -alias Example_SSL_CA_G2 -keystore "%JAVA_HOME%/jre/lib/security/cacerts" -trustcacerts
        -file "F:/SSL/Example_SSL_CA_G2.cer"
  5. Enter the password as changeit.
  6. A success message is displayed after you press Enter key - "Certificate was added to keystore”.
  7. Restart AnalystConnect.
  8. Now, add the WMS map to Spectrum Spatial Analyst map config.