Adding a Certificate to the Java Keystore
Use the following steps to add an SSL certificate to the Java keystore for a Data Collector. Some servers, such as VSphere, require a certificate for connection while communicating with SSL.
Keystore File Location
For Windows Data Collector:
%APTARE_HOME%\jre\lib\security\cacerts
For Linux Data Collector:
%APTARE_HOME%/jre/lib/security/cacerts
Copy the certificate file (certfile.txt) to the Data Collector. Run the following command to add the certificate:
For Windows Data Collector:
%APTARE_HOME%\jre\bin\keytool -import -alias "somealias" -file certfile.txt -keystore %APTARE_HOME%\jre\lib\security\cacerts
For Linux Data Collector:
%APTARE_HOME%/jre/bin/keytool -import -alias "somealias" -file certfile.txt -keystore %APTARE_HOME%/jre/lib/security/cacerts
When prompted, enter the default password to the keystore:
changeit
The results will be similar to the following example:
Enter keystore password:
......
Certificate Shown here
......
......
......
Trust this certificate? [no]: yes
Once completed, run the following keytool command to view a list of certificates from the keystore and confirm that the certificate was successfully added. The certificate fingerprint line displays with the alias name used during the import.
For Windows Data Collector:
%APTARE_HOME%\jre\bin\keytool -list -keystore %APTARE_HOME%\jre\lib\security\cacerts
For Linux Data Collector:
%APTARE_HOME%/jre/bin/keytool -list -keystore %APTARE_HOME%/jre/lib/security/cacerts
Sample Linux Output
Enter keystore password:
Keystore type: JKS
Keystore provider: SUN
Your keystore contains 79 entries
digicertassuredidrootca, Apr 16, 2008, trustedCertEntry,
Certificate fingerprint (SHA1): 05:63:B8:63:0D:62:D7:5A:BB:C8:AB:1E:4B:DF:B5:A8:99:B2:4D:43
trustcenterclass2caii, Apr 29, 2008, trustedCertEntry,
Certificate fingerprint (SHA1): AE:50:83:ED:7C:F4:5C:BC:8F:61:C6:21:FE:68:5D:79:42:21:15:6E
.....