To install a Certificate on IBM WebSphere HTTP Server follow the instructions below:

a. Fetch your certificate and intermediate CA

1. You will receive an email when your certificate is issued.
2. Copy and Paste your Certificate (First certificate) to Notepad and save it with a .cert or .arm extension
3. Copy and Paste the intermediate CA Certificate(second certificate) to Notepad and save as intermediate.cert

b. Import the Root Certificate:

Follow the instructions below to install the ROOT CA Certificate:

1. Enter ikeyman on a command line on Unix or start the Key Management utility in the IBM HTTP Server folder on Windows NT.
2. Select Key Database File from the main menu, then select Open.
3. In the Open dialog box, enter your key database name or click on key.kdb if you are using the default. Click OK.
4. In the Password Prompt dialog box, enter your correct password and click OK.
5. Select Signer Certificates in the Key Database content frame, then click the Add button.
6. In the Add CA's Certificate from a File dialog box, select the Base64-encoded ASCII data certificate file name, or use the Browse option. Click OK.
7. In the Label dialog box, enter a label name and click OK.

Step 5. Import Intermediate Certificate:

Follow the instructions below to install the intermediate CA:

1. Enter ikeyman on a command line on Unix or start the Key Management utility in the IBM HTTP Server folder on Windows NT.
2. Select Key Database File from the main menu, then select Open.
3. In the Open dialog box, enter your key database name or click on key.kdb if you are using the default. Click OK.
4. In the Password Prompt dialog box, enter your correct password and click OK.
5. Select Signer Certificates in the Key Database content frame, then click the Add button.
6. In the Add CA's Certificate from a File dialog box, select the Base64-encoded ASCII data certificate file name, or use the Browse option. Click OK.
7. In the Label dialog box, enter a label name and click OK.

Step 6. Install your certificate:

To install a certificate in IBM HTTP Server follow the instructions below:

1. Save the certificate text file with a .cert extension or .arm extension
2. Open the .kdb file using the IKEYMAN utility
3. In the middle of the IKEYMAN GUI you will see a section called Key database content
4. Click on the down arrow to the right, to display a list of three choices
5. Select Personal Certificates
6. From the Personal Certificates section, click the Receive button
7. Data Type= (Leave the default of Base64-encoded ASCII data)
8. Browse to the directory that contains the .cert or .arm file
9. Highlight the file and click Open.
10. Now click OK on this dialog box