You've completed a Certificate Signing Request (CSR) and have ordered the certificate. Below are instructions for installing the certificate into your vCommander Keystore - includes Primary and Intermediate or Full certificates install. 

Before you start: always create a snapshot of the vCommander application server. The snapshot should be done after completion of the CSR and before installing the cert into the Keystore. 


Importing the Primary and Intermediate:


1) Login to your DigiCert® Management Console 

2) Select Server Platform "Tomcat"

3) File Type Separate primary and intermediate .crt files (zipped)

4) Move these files to the \vCommander\jre\bin directory 

  • Your_Domain_name.crt (primary cert)
  • DigiCertCA.crt     (Intermediate cert)

5) You need to apply the Intermediate certificate first

c:\Program Files\Embotics\vCommander\jre\bing> 

keytool -import -trustcacerts -alias intermediate -file DigiCertCA.crt -keystore "c:\Program Files\Embotics\vCommander\tomcat\conf\keystore" -storepass changeit 

6)You will get confirmation that the "Certificate reply was installed in keystore"

7) Now apply the primary certificate using the following command: 

c:\Program Files\Embotics\vCommander\jre\bing> 

keytool -import -trustcacerts -alias tomcat -file your_domain_name.crt -keystore "c:\Program Files\Embotics\vCommander\tomcat\conf\keystore" -storepass changeit

8) Once completed, you will receive the following confirmation: "Certificate reply was installed in keystore"

9) Restart vCommander Windows Service and test the new certificate information. Verify that it was successful and there are no issues.  


Importing the full certificate


1) Login to your DigiCert® Management Console 

2) Downlaod your SSL certficate file (your_domain_name.p7b) to the vCommander directory (Program Files\Embotics\vCommander\jre\bin)

The p7b file should contain the full chain of the certificate (primary and intermediate). 

3) Run the following command to import 

Navigate to: c:\Program Files\Embotics\vCommander\jre

Run the following command or follow your CA instructions as needed: 

keytool -import -alias tomcat -keystore “..\..\tomcat\conf\keystore” -trustcacerts -file your_site_name.p7b -storepass changeit

4) Once completed, you will receive the following confirmation: "Certificate reply was installed in keystore"

5) You will be asked if you want to trust the certificate, Chose or yes.

6) Restart vCommander Windows Service and test the new certificate information. Verify that it was successful and there are no issues.  

 

See Also