FAQ: How to import a self-signed SSL certificate to a keystore cacerts file? (2678)

[admin]

Article ID: 2678
Reviewed: 24/07/2014

Product Version:
AhsayOBS: Pre-7.3.2.0
OS: All platforms

Description:
This document contains instruction on how to import a self-signed SSL certificate to a keystore cacerts file.

Steps:
Refer to the following steps:

1. To import a self-signed certificate to a cacerts file, first convert the cert into a DER encoded binary certificate in .cer format.
   
   Connect to the AhsayOBS web management console with Internet Explorer:
   
   
   • Select the Certificate Error button beside the address bar, and then View certificates.
     
     

     

     
     
   • Import the certificate by selecting Install Certificate.
     
     

     

     
     
   • Ensure that the certificate to be imported is placed in the Trusted Root Certification Authorities store:
     
     

     

   
   
   
2. Using the imported certificate, export the DER encoded binary certificate in .cer format:
   
   
   • View the imported certificate (from Step 1) in Internet Explorer, and select Export.
     
     

     

     
     
   • In the Certificate Export Wizard, export the certificate without the private key.
     
     

     

     
     
   • Select the DER encoded binary X.509 (.CER) format.
     
     

     

     
     
   • You will be prompted to enter a name for the certificate to be exported, in this case, we named it Cert_File.
     
     

     

     
     A certificate file "Cert_File.cer" will then be exported to C root directory, this file can be used to import to the cacerts file.
   
   
   
3. Open an administrative command prompt:
   
   
   • Copy "Cert_File.cer" from:
     
     C:\Cert_File.cer
     
     to
     
     C:\Program Files\AhsayOBM\jvm\bin\Cert_File.cer
     
     
     
   • Navigate to the directory "C:\Program Files\AhsayOBM\jvm\bin", and enter the following command:
     
     

     >keytool -import -alias "Alias_Name" -keystore "C:\Program Files\AhsayOBM\jvm\lib\security\cacerts" -file Cert_File.cer

     
     
     
   • When prompted for a password, enter "changeit" without the quotations.
     
     
     
   • Enter "yes" when asked if you wish to trust the certificate.

Keywords:
SSL, cert, certificate, CA