HP 800 Series, User Manual

Page: 453 / 586

System Administration
Creating and Replacing SSL Certificates
15-29
keytool -import -alias
<CA_alias>
-file
<ca_root_cert_file>
-keystore /usr/local/nac/keystore/cacerts
Where:
<CA_alias> is an alias unique to your cacerts file and preferably identifies
the CA to which it pertains
<ca_root_cert_file> is the file containing the CA's root certificate
6.
keytool
prompts for the password for the cacerts file, which should be
the default:
changeit
.
7. If you are prompted, enter
yes
to trust the certificate.
8. Once you get your signed certificate back from the CA, import it into your
keystore (see “Copying Files” on page 1-20), replacing the previously self-
signed public certificate for your key by entering the following command
on the command line of the NAC 800 server:
keytool -import -alias
<key_alias>
-trustcacerts -file
<signed_cert_file>
-keystore /usr/local/nac/keystore/
compliance.keystore
Where:
<key_alias> is the name for the key within the keystore file
<signed_cert_file> is the name of the file containing your CA-signed
certificate
9.
keytool
prompts for the password for the keystore_filename file, which
is the password used when the keystore was created.
10. Save and exit the file.