Update the LDAP certificate in OS Java

You will use the same certificate that you used in WebSphere for LSF.

Two tools are available to perform these steps, keytool and ikeyman. The keytool utility is a command line utility delivered with Java. The ikeyman utility is a GUI utility delivered by IBM with IBM HTTP Server and IBM WebSphere. You can use either tool per your preference. This section provides steps for both tools.

IMPORTANT: If you are running Oracle or IBM Java 1.8.181 or higher, your LDAP server certificate must contain a Subject Alternative Name (SAN). See Infor KB 2089390 for more information. The article title is: "javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative DNS name matching <domain> not found."