The GroupWise driver uses REST APIs to communicate with Groupwise. Groupwise internally uses an SSL connection. SSL connections encrypt all traffic on the TCP/IP socket by using a public/private key pair.
You can configure the driver to always accept the GroupWise server's certificate for establishing a SSL connection with the Identity Manager server. To do so, change the Always accept server certificate setting to True during driver configuration. For more information, see Step 11. If you leave the setting as is, you can use an alternative method and import the server certificate from GroupWise into a keystore on your Identity Manager server.
Import the server certificate from GroupWise and save it to a file in the der format.
Open a web browser and connect to GroupWise with administrator rights at the first time.
The browser prompts you to accept the server certificate.
Go to the properties of the browser and download the certificate to your Identity Manager server in the der format.
Save the file to a local file system.
Add the .der file to the keystore by using the following command at the command line:
keytool -import -file PATH_OF_DERFile\PublicKeyCert.der -keystore KEYSTOERPATH\NAME.keystore -storepass keystorepass
NetIQ recommends that you use Java 1.7 keytool. The command might not work with versions earlier than Java 1.7.
When you are asked to trust this certificate, select Yes.
Copy the .keystore file to any directory on the same file system where Identity Manager is running.
In iManager, select Identity Manager > Identity Manager Overview.
Click Driver Sets, select the driverset where your driver is running and then click the GroupWise driver object.
In the Actions menu, click Edit properties.
In the Keystore Path for SSL certificate(s) parameter, enter the complete path to the keystore file.
Specify the keystore password.
Click Apply, then click OK to save the configuration.