giving signer certificates and trust stores in WAS to run services from Portal.

1.First import the certificates by running  ikeyman.sh utility from the /bin, use xmanger for running this utility the UI will not appear in Putty.you can refer
http://publib.boulder.ibm.com/infocenter/adiehelp/v5r1m1/index.jsp?topic=/com.ibm.wasee.doc/info/ee/ae/tsec_importsigner.html for importing keys.

2.put the imported keys in WAS server by winscp.

3.Open WAS administration console  and  go to signer certificates ,
put entry for client as shown below.

4. Similarly put entries for trust stores for default and Client as shown below by clicking on trust stores.
5. Restart WAS , and start hitting services from portal, your EJB will run on WAS properly.