Replacing HP CSA 4.2 Self-Signed Certificate

Posted on by

I am sharing with you step by step guide not all of them since

  • Open command prompt as an Administrator.
  • Go to CSA directory for example (cd “C:\Program Files\Hewlett-Packard\CSA\jboss-as-7.1.1.Final\bin”).
  • Delete the existing CSA certificate by executing the command (keytool.exe -delete -alias CSA -keystore ..\..\jboss-as-7.1.1.Final\standalone\configuration\.keystore -storepass changeit).
  • execute the command (keytool.exe -genkeypair -alias CSA -validity 365 -keyalg rsa -keysize 2048 -keystore ..\..\jboss-as-7.1.1.Final\standalone\configuration\.keystore)to generate a keypair.
  • Check the certificate you just generated by running the command (keytool.exe -list -v -keystore ..\..\jboss-as-7.1.1.Final\standalone\configuration\.keystore -storepass changeit).then you should see all attributed that you set.
  • Run the following command to export the generated certificate from keystore (keytool.exe -export -alias CSA -file ..\..\jboss-as-7.1.1.Final\standalone\configuration\jboss.crt -keystore ..\..\jboss-as-7.1.1.Final\standalone\configuration\.keystore -storepass changeit).
  • Change directory to “openjre\bin” by executing the following two commands (cd ..\..\), (cd openjre\bin).
  • run the following command to delete the existing certificate from cacert file (keytool.exe -delete -alias CSA -keystore ..\lib\security\cacerts -storepass changeit).
  • Import the new Self-Signed Certificate bu running the command (keytool.exe -importcert -alias CSA -file ..\..\jboss-as-7.1.1.Final\standalone\configuration\jboss.crt -storepass changeit -keystore ..\lib\security\cacerts).
  • check if new certificate is imported successfully by executing the command (keytool.exe -list -v -keystore ..\lib\security\cacerts).
  • Configure MPP by running the command (keytool -importkeystore -srckeystore ..\..\jboss-as-7.1.1.Final\standalone\configuration\.keystore -deststoretype PKCS12 -destkeystore ..\..\portal\conf\.mpp_keystore).