Setting up Custom Identity and Custom Trust (Doc ID 2665786.1)

Last updated on MAY 22, 2023

Applies to:

SOA Suite Cloud Service - Version N/A to N/A
Information in this document applies to any platform.

Goal

This document lists the steps for replacing the identity and trust of SOA Cloud service (no otd) with custom identity and custom trust and register the SOA CS server with digital certificates procured from public certificate authorities like godaddy/digicert. For this documentation, we have registered the public IP of SOACS domain with GoDaddy and taken the CA signed certificates from GoDaddy itself.

Solution

	To view full details, sign in with your My Oracle Support account.
	Don't have a My Oracle Support account? Click to get started!

In this Document

Domain Name Registration for SOA CS server

Creating custom identity and custom trust keystore and generate CSR

CSR generation and sharing the CSR with Certificate Authority to get the CA signed certificates

Root, Intermediate and Signed Certificates

Importing CA Certificates

Setting up the identity

Setting up trust

Setting up cacerts

What fails when there is an upgrade!

Change weblogic keystores to Custom Identity and Custom Trust

Changes in boot.properties

Changes in adminServer boot.properties

Changes in managedServer boot.properties

Changes in SetDomainEnv.sh

Changes in Frontend Host Port

Verification of the env:

Two way SSL enforcement

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.