Configuring Tomcat for Sending Secure Reports

You need to be familiar with Tomcat and SSL configuration to perform this task.

If your Performance Manager system uses secure connections, sending reports per email from the Performance Manager UI will result in SSLHandshakeException errors. To enable sending reports in a secure Performance Manager environment you need to configure Tomcat to trust the certificate.

Log on to the Performance Manager server as an administrator.
Open your browser and go to the application's home URL, for example https://hostname:8443. A dialog box warning you about the certificate appears.
Click View Certificate. The certificate detail page appears.
Click Install certificate and complete the subsequent certificate import wizard. Store the certificate in Trusted Root Certification Authorities. A confirmation message like The import was successful displays.
In your browser, export the certificate. In Internet Explorer for example, choose Tools > Internet Options and select the Content tab. Click Certificates, select the Trusted Root Certification Authorities tab, select the certificate you have installed before and click Export.
Select DER encoded binary X.509 and click Next. Choose a location for the storage of the certificate file, for example c:\hostname.cer, and complete the export wizard.
Use the keytool -import command to import the file into your JRE's Certification Authorities keystore on your Performance Manager machine (on the front-end and application server): "%SPM_HOME%\lib\jre\bin\keytool" -import -alias tomcat –keystore "%SPM_HOME %\lib\jre\lib\security\cacerts" -file c:\hostname.cer
Type in the keystore password when prompted . The initial password is changeit.
Confirm the following prompt Trust this certificate? with yes. A message like Certificate was added to keystore should display. This confirms that your private certificate has been added to the application's keystore as a Trusted Certificate Authority.
Restart all services.