Importing certificates into the FSC keystore

After obtaining the signed certificate from your certificate signing authority, you must import it into the keystore. Run the following command to import the signed certificate: Copy >keytool -import -trustcacerts -keystore keystore -file FSC_myhost.cer -alias FSC_myhost Complete each question prompted by the command. For example: Copy >keytool -import -trustcacerts -keystore keystore -file FSC_myhost.cer -alias FSC_myhost Enter keystore password: keystore.password Enter key password for FSC_myhost FSC_myhost.password Verify the keystore.FSC_host_userid file in the FSC_HOME directory. The keystore must contain the private key and certificate for the local machine. For example: Copy myhost> keytool -list -v -keystore keystore.FSC_myhost_userid.jks -storepass keystore.FSC_myhost_userid.password Keystore type: jks Keystore provider: SUN Your keystore contains 1 entries Alias name: myhost.mycompany.com Creation date: Jan 23, 2008 Entry type: keyEntry Certificate chain length: 2 Certificate[1]: Owner: CN=myhost.mycompany.com, OU=QA, O=YOUR Corp, L=Plano, ST=Texas, C=US Issuer: EMAILADDRESS=premium-server@thawte.com, CN=Thawte Premium Server CA, OU=Certification Services Division, O=Thawte Consulting cc, L=Cape Town, ST=Western Cape, C=ZA Serial number: 485099dcc36d1ea9d773ba153022a951 Valid from: Thu Jan 10 16:44:38 CST 2008 until: Thu Mar 27 13:20:25 CDT 2008 Certificate fingerprints: MD5: 86:7E:16:59:99:E6:6F:B6:27:9B:92:19:E7:65:EB:A2 SHA1: 6A:D1:64:7A:0A:E1:CB:62:D3:EF:91:BF:E9:A0:CE:AF:A3:3D:E4:1E Certificate[2]: Owner: EMAILADDRESS=premium-server@thawte.com, CN=Thawte Premium Server CA, OU=Certification Services Division, O=Thawte Consulting cc, L=Cape Town, ST=Western Cape, C=ZA, Issuer: EMAILADDRESS=premium-server@thawte.com, CN=Thawte Premium Server CA OU=Certification Services Division, O=Thawte Consulting cc, L=Cape Town, ST=Western Cape, C=ZA Serial number: 1 Valid from: Wed Jul 31 19:00:00 CDT 1996 until: Thu Dec 31 17:59:59 CST 2020 Certificate fingerprints: MD5: 06:9F:69:79:16:66:90:02:1B:8C:8C:A2:C3:07:6F:3A SHA1: 62:7F:8D:78:27:65:63:99:D2:7D:7F:90:44:C9:FE:B3:F3:3E:FA:9A ******************************************* ******************************************* Update the fsc.FSC_host_userid.properties file in the FSC_HOME directory with the keystore and key entry information. For example: Copy # fsc.FSC_myhost_userid.properties com.teamcenter.fms.servercache.keystore.file=${FMS_HOME}/keystore.FSC_myhost_userid.jks com.teamcenter.fms.servercache.keystore.password=keystore.FSC_myhost_userid.password com.teamcenter.fms.servercache.keystore.ssl.certificate.password= keystore.FSC_myhost_userid.password # these are not needed for 1-way SSL javax.net.ssl.keyStore=${FMS_HOME}/keystore.FSC_myhost_userid.jks javax.net.ssl.keyStorePassword=keystore.FSC_myhost_userid.password javax.net.ssl.trustStore=${FMS_HOME}/keystore.FSC_myhost_userid.jks javax.net.ssl.trustStorePassword=keystore.FSC_myhost_userid.password