Specify an external TrustStore for the MID Server

The MID Server JVM can utilize a TrustStore external to the MID installation directory so any certificates added to the TrustStore are not overwritten during an upgrade. It is important that this TrustStore file reside outside of the MID installation directory, and the Truststore location can be specified by adding additional parameters to the MID Server's wrapper-override.conf file.

Before you begin

Role required: admin

Procedure

1. In the MID Server host, navigate to the wrapper-override.conf file.

2. Specify an external TrustStore by appending a custom parameter to the end of your MID’s wrapper-override.conf file.

   For example, on a Windows MID with an external TrustStore found at C:\external_truststore\cacerts, the end of the file would appear similar to:

   # Add additional custom parameters below
   
   wrapper.java.additional.3=-Djavax.net.ssl.trustStore=C:\external_truststore\cacerts
   
   wrapper.java.additional.4=-Djavax.net.ssl.trustStorePassword=<truststore’s password>
   

   Note: If you have specified other additional parameters in this file then the numerical identifier, in this case 3 and 4, may differ.

Parent Topic:Securing and encrypting MID Server data

Related topics

MID Server certificate check policies

Encrypt or decrypt MID Server configuration file values

MID Server configuration file security

MID Server authentication credentials and SOAP requests

MID Server unified key store

Enable MID Server mutual authentication

MID Server Azure Key Vault integration

MID Server command audit log

Rekey a MID Server

Add SSL certificates for the MID Server

MID Server SSH cryptographic algorithms

Attach a script file to a file synchronized MID Server

MID Server FIPS Enforced Mode

MID Server Governance