For Control-M/Enterprise Manager 9.0.19 and higher:

1. Copy your certificate to path:
    UNIX/Linux: <EM HOME>/ctm_em/ini/ssl

    Windows: <EM_HOME>\Default\ini\ssl

2.     From Control-M/Enterprise Manager server command line, run: manage_webserver  
3.     Select option 1 Tomcat Configuration
4.     Select option 3 Secure Connector Configuration 
5.     Select option 3 Edit SSL Connector
6.     Select the appropriate host. 
7.     Select option: 8 keystoreFile
8.     Enter the full path of the certificate that you copied on step 1. E.G. tomcat.p12
9.     Select option: 9 keystorePass
10. Enter the certificate's password. You must receive a message confirming that the password is valid.
11. Enter "s" to save the changes, you must get the next output:

    Enter An Option Number [use 'b' to back]: s
    Save the new configuration (Y/N)? y

    Encrypting the password ...
    Password encrypted ..
    Backup done successfully, Two files were created.

12. From Control-M Configuration Manager recycle the Web Server to submit the changes. ***NOTE the web server recycle will disconnect the users from the Workload Automation client***
13. Validate that your certificate is in place.

For Control-M/Enterprise Manager 9.0.00 and 8.0.00:

Use the PFX/P12 (PKCS#12) file directly in the server.xml configuration file without importing this file to a keystore.

1. Copy your certificate to the tomcat conf directory located below:

Windows: <EM_HOME>\Default\emweb\tomcat\conf

UNIX: ctm_em/etc/emweb/tomcat/conf

2. First backup the server.xml file and then define the text for the SSL connector in the server.xml file using the name of your pfx file and password like in the text below:

<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS"
keystoreFile="conf/your_domain.pfx"
keystorePass="your_keystore_password"
keystoreType="PKCS12"/>

*Replace your_domain.pfx and your_keystore_password with the name of your certificate and the password.
*Please make sure the Connector for port 8443 where the changes above was made is activated by removing the comment line above it (<!--) if there's any.
Restart the Control-M Web Server to make the change effective.
 

Additional Information: