{"id":367,"date":"2016-01-19T15:06:27","date_gmt":"2016-01-19T15:06:27","guid":{"rendered":"http:\/\/www.pkipartner.support\/?page_id=367"},"modified":"2016-03-29T09:42:28","modified_gmt":"2016-03-29T09:42:28","slug":"install-certificate-installation-java-based-web-servers-tomcat-using-keytool","status":"publish","type":"page","link":"https:\/\/pkipartner.com\/support\/install-certificate-installation-java-based-web-servers-tomcat-using-keytool\/","title":{"rendered":"Install – Java Based Web Servers (Tomcat) using keytool"},"content":{"rendered":"

Certificate Installation: Java Based Web Servers (Tomcat) using keytool<\/strong><\/h1>\n

Installing SSL Certificate Chain (Root, Intermediate(s) and the End Entity)<\/strong><\/p>\n

    \n
  1. Import Root Certificate<\/li>\n<\/ol>\n

    -> keytool -import -trustcacerts -alias<\/em><\/strong>\u00a0<\/em><\/strong>AddTrustExternalCARoot<\/em><\/strong>\u00a0<\/em><\/strong>-fileAddTrustExternalCARoot.crt<\/em><\/strong>\u00a0<\/em><\/strong>-keystore<\/em><\/strong>\u00a0<\/em><\/strong>domain.keystore<\/em><\/strong><\/p>\n

      \n
    1. Import Intermediate(s)<\/li>\n<\/ol>\n

      -> keytool -import -trustcacerts -alias<\/em><\/strong>\u00a0<\/em><\/strong>intermediate_filename<\/em><\/strong>\u00a0<\/em><\/strong>-fileintermediate_filename.crt<\/em><\/strong>\u00a0<\/em><\/strong>-keystore<\/em><\/strong>\u00a0<\/em><\/strong>domain.keystore<\/em><\/strong><\/p>\n

      Note:\u00a0 <\/u><\/strong>Depending on the type of certificate that was purchased, there may be more than one Intermediate certificate in the chain of trust. Please install all intermediates in numberical order until you get to the domain\/end entity certificate.<\/p>\n

      In order to determine which chain of trust you have, please follow the article title Which is Root? Which is Intermediate?<\/a><\/p>\n

      Example:<\/strong>\u00a0UTNAddTrustSGCCA.crt<\/em>\u00a0would become to\u00a0UTNAddTrustSGCCA<\/em>.<\/p>\n

      For more information on<\/p>\n

        \n
      1. Import Entity\/Domain certificate<\/li>\n<\/ol>\n

        -> keytool -import -trustcacerts -alias<\/em><\/strong>\u00a0<\/em><\/strong>mykey<\/em><\/strong>\u00a0<\/em><\/strong>-file<\/em><\/strong>\u00a0<\/em><\/strong>yourDomainName.crt<\/em><\/strong>\u00a0<\/em><\/strong>-keystoredomain.keystore<\/em><\/strong><\/p>\n

        You should you should receive a message:\u00a0Certificate reply was installed in keystore<\/strong>\u00a0if successful. It should NOT match the output of Step 1 or 2 above.<\/p>\n

        Note:<\/strong>\u00a0If an alias was specified upon creation of the CSR then please use that alias instead ofmykey<\/em><\/strong>.<\/p>\n

          \n
        1. Restart the Web Server Service.\n

          Note:<\/u><\/strong>Tomcat will first need an SSL Connector configured before it can accept secure connections. Please ensure this is set\u00a0BEFORE<\/strong>\u00a0the server is restarted.
          \n          Tomcat SSL Connector<\/a><\/li>\n<\/ol>\n

          Related Articles:<\/h2>\n

          *\u00a0CSR Generation: Java-based Webservers (using keytool)<\/a>
          \n*\u00a0          Which is Root? Which is Intermediate<\/a>?<\/p>\n","protected":false},"excerpt":{"rendered":"

          Certificate Installation: Java Based Web Servers (Tomcat) using keytool Installing SSL Certificate Chain (Root, Intermediate(s) and the End Entity) Import Root Certificate -> keytool -import -trustcacerts -alias\u00a0AddTrustExternalCARoot\u00a0-fileAddTrustExternalCARoot.crt\u00a0-keystore\u00a0domain.keystore Import Intermediate(s) -> keytool -import -trustcacerts -alias\u00a0intermediate_filename\u00a0-fileintermediate_filename.crt\u00a0-keystore\u00a0domain.keystore Note:\u00a0 Depending on the type of certificate that was purchased, there may be more than one\u2026<\/p>\n

          Continue reading<\/span><\/i><\/a> <\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"_links":{"self":[{"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/pages\/367"}],"collection":[{"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/comments?post=367"}],"version-history":[{"count":4,"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/pages\/367\/revisions"}],"predecessor-version":[{"id":768,"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/pages\/367\/revisions\/768"}],"wp:attachment":[{"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/media?parent=367"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}