Import third party SSL Certificate

In order to implement SSL, a web server must have an associated certificate for each external interface (IP address) that accepts secure connections.

Procedure for getting SSL Certificate for Tomcat webserver:

Central Server:
Following commands are to be executed from the command prompt in the directory <Central_Home>\jre\bin (Central_Home will be commonly C:\Program Files\AdventNet\ME\Central)

1. keytool -genkey -alias CentralSSL -keyalg RSA -keystore server.keystore. It will prompt for a password. Enter the password as 'storepw'. This will be the keystore password - <keystore password>.
   • Example: CN =  mydomain    {Enter your exact host and domain name that you wish to secure. Example: If you wish to secure http://www.mydomain.com/, then you will need to enter the exact host (www) and domain name (mydomain.com) in this field. If you enter mydomain.com then the certificate issued to you will only work error free on https://mydomain.com/} OU = MSP O = My organization L = Los Angles S = CA C = US Again it will ask for a password give the password you gave previously <keystore password>
2. keytool -certreq -keyalg RSA -alias CentralSSL -file certreq.csr -keystore server.keystore. A certreq.csr file will be created in the <Central_Home>\jre\bin directory.
3. Submit the certreq.csr file to the CA and get the certificate file from the Certificate Authority(CA) for web server "tomcat".
4. keytool -import -alias root -keystore server.keystore -trustcacerts -file <filename_of_the_chain_certificate>[Chain or root Certificate file, that would be given by CA].
5. keytool -import -alias CentralSSL -keystore server.keystore -trustcacerts -file <your_certificate_filename>[Certificate file sent by CA to you specifically for your domain].
6. keytool -export -keystore server.keystore -alias CentralSSL -storepass <keystore password> -file temp.cer.
7. keytool -import -keystore https.truststore -alias CentralSSL -file temp.cer -storepass <keystore password>.
8. copy the https.truststore file in the <Central_Home>\jre\bin directory to the <Central_Home>\conf\probe\defaultToNewProbes\conf\ and <Central_Home>\conf directories.
9. copy the server.keystore file in the <Central_Home>\jre\bin directory to the <Central_Home>\tomcat\conf directory.
10. Restart the central server.

1. Copy the https.truststore file from <Central_Home>\conf directory to <Probe_Home>\conf directory.
2. Execute the batch file in the <Probe_Home>\bin directory with the command " ssl_gen.bat -f ".