keystore2, which we will use in the remaining examples. This command creates a second keystore in PKCS #12 format, named. Run the following command to export the keystore to PKCS #12 format. What is the two-letter country code for this unit? What is the name of your State or Province? What is the name of your City or Locality? What is the name of your organizational unit? Keytool -genkey -keyalg RSA -alias tomcat -keystore ~/.keystore -validity 365 -keysize 2048
Keytool -genkey -keyalg RSA -alias tomcat -keystore C:\Users\Administrator\.keystore -validity 365 -keysize 2048
Run the following command to generate a private key and a new key store. 
On the computer where Deep Security Manager is running, open a command prompt as an administrator.Ĭ:\Program Files\Trend Micro\Deep Security Manager\jre\bin. If you're not familiar with Java Keystores and Keytool, DigitalOcean provides a good explanation of the concepts in their article, Java Keytool Essentials: Working with Java Keystores. Java Keystores are used to contain certificates used by Java-based applications. 
If necessary, consult with the CA that issued your certificate.
Ensure you have the complete certificate chain. This scenario covers situations where the file was backed up from a previous installation or created for a common domain such as a wildcard certificate. Option B - Use an existing Java Key Store file Configure Deep Security to use the signed certificate store. Import the signed certificate into the keystore. Generate a CSR and request a certificate. This is the most reliable way to replace the certificate. Option A - Request a brand new certificate for the Deep Security Manager domain name Before replacing the certificate, carefully read the instructions in this section.įollow the steps in either Option A or Option B to replace the Deep Security Manager TLS certificate: Replacing the default certificate with an invalid certificate or an incomplete certificate chain can cause Deep Security Manager to become unreachable. The certificates are maintained when you upgrade Deep Security Manager. You can replace this default certificate with a certificate from a trusted certificate authority (CA) after the installation is complete. Replace the Deep Security Manager TLS certificateĪpplies to on-premise Deep Security software installations onlyĭuring installation, Deep Security Manager auto-generates a self-signed TLS certificate for web console access.
0 kommentar(er)
