How to configure Standalone Fuego BEA Aqualogic Oracle BPM Studio to work with Secure Web Services?

While evaluating BEA BPM Studio I had to struggle a bit with how to configure Standalone Fuego BEA Aqualogic Oracle BPM Studio .... I am trying to give credit to all companies here :) to work with Secure Web Services?

Now I have secured web services orchestrated and also using encryption in my BPM Processes. Here is the meat of the matter ...

In order to communicate with secured webservices using SSL encryption (those with WSDL end point starting as https:// ) you need to have certificates from those servers installed in your keystore.

For BPM Standalone these are the steps. And before you begin set JAVA_HOME to C:\OraBPMStudioHome\eclipse\jre if you have not done so already.

1. Download the .cer file from server. (One way is you can use IE browser to get that file and export it from browser to a local directory)

2. Put this file in %JAVA_HOME%\jre\lib\security. You can put it anywhere you want.

3. Run the following command at a command prompt:

C:\Program Files\Java\jre1.6.0_02\bin>keytool -import -trustcacerts -alias <CERT ALIAS NAME> -keystore ..\lib\security\cacerts -file ..\lib\security\gd_<cert file name>.cer

4. You will be prompted for a password. If you have not changed the password, it will be "changeit".

5. You will then get the following message if all is successful - "Certificate was added to keystore".

6. Restart Tomcat (inbuilt server in BPM Studio).

This should solve your problem.

Pls note that if you have not configured your keyStore then first do so. you will find this document handy to do so.

http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html#Edit%20the%20Tomcat%20Configuration%20File

Quick tip: To see a list of keys in keystore

%JAVA_HOME%\bin\keytool -list -keystore ..\lib\security\cacerts

Arvind