Adding a Certificate to the Java Keystore (Virtualization Manager)
  
Version 10.0.01
Adding a Certificate to the Java Keystore (Virtualization Manager)
Use the following steps to add an SSL certificate to the Java keystore for a Data Collector. Some servers, such as VSphere, require a certificate for connection while communicating with SSL.
Keystore File Location
Note: For the following commands, if you are not running in the default collector location (/opt/aptare or C:\opt\aptare), substitute the appropriate APTARE_HOME in the command path.
For Windows Data Collector:
C:\opt\aptare\jre\lib\security\cacerts
For Linux Data Collector:
/opt/aptare/jre/lib/security/cacerts
Copy the certificate file (certfile.txt) to the Data Collector. Run the following command to add the certificate:
For Windows Data Collector:
C:\opt\jre\bin\keytool -import -alias "somealias" -file certfile.txt -keystore C:\opt\aptare\jre\lib\security\cacerts
For Linux Data Collector:
/usr/java/bin/keytool -import -alias "somealias" -file certfile.txt -keystore /opt/aptare/jre/lib/security/cacerts
When prompted, enter the default password to the keystore:
changeit
The results will be similar to the following example:
Enter keystore password:
......
Certificate Shown here
......
......
......
Trust this certificate? [no]: yes
Once completed, run the following keytool command to view a list of certificates from the keystore and confirm that the certificate was successfully added. The certificate fingerprint line displays with the alias name used during the import.
For Windows Data Collector:
C:\opt\jre\bin\keytool -list -keystore C:\opt\aptare\jre\lib\security\cacerts
For Linux Data Collector:
/usr/java/bin/keytool -list -keystore /opt/aptare/jre/lib/security/cacerts
Sample Linux Output
Enter keystore password:
Keystore type: JKS
Keystore provider: SUN
Your keystore contains 79 entries
digicertassuredidrootca, Apr 16, 2008, trustedCertEntry,
Certificate fingerprint (SHA1): 05:63:B8:63:0D:62:D7:5A:BB:C8:AB:1E:4B:DF:B5:A8:99:B2:4D:43
trustcenterclass2caii, Apr 29, 2008, trustedCertEntry,
Certificate fingerprint (SHA1): AE:50:83:ED:7C:F4:5C:BC:8F:61:C6:21:FE:68:5D:79:42:21:15:6E
.....