You've completed a Certificate Signing Request (CSR) and have ordered the certificate. Below are instructions for installing the certificate into your vCommander Keystore - includes Primary and Intermediate or Full certificates install. 

Before you start: always create a snapshot of the vCommander application server. The snapshot should be done after completion of the CSR and before installing the cert into the Keystore. 


These instructions are current as of the date of initial publication. Certificate authorities may change their policies and practices at any time without Embotics having any knowledge of the change. Some vendors may require additional steps such as creating additional keystores or modifying the server.xml file. When in doubt, please contact the support team for the issuing authority for further instructions. DigCert Support 1-800-701-9600. If you require Embotics to assist in the installation of a 3rd Party SSL Certificate a Professional Service fee may be applicable.


Importing the Primary and Intermediate:


1) Login to your DigiCert® Management Console 

2) Select Server Platform "Tomcat"

3) File Type Separate primary and intermediate .crt files (zipped)

4) Move these files to the \vCommander\jre\bin directory 

  • Your_Domain_name.crt (primary cert)
  • DigiCertCA.crt     (Intermediate cert)

5) You need to apply the Intermediate certificate first

c:\Program Files\Embotics\vCommander\jre\bing> 

keytool -import -trustcacerts -alias intermediate -file DigiCertCA.crt -keystore "c:\Program Files\Embotics\vCommander\tomcat\conf\keystore" -storepass changeit 

6)You will get confirmation that the "Certificate reply was installed in keystore"

7) Now apply the primary certificate using the following command: 

c:\Program Files\Embotics\vCommander\jre\bing> 

keytool -import -trustcacerts -alias tomcat -file your_domain_name.crt -keystore "c:\Program Files\Embotics\vCommander\tomcat\conf\keystore" -storepass changeit

8) Once completed, you will receive the following confirmation: "Certificate reply was installed in keystore"

9) Restart vCommander Windows Service and test the new certificate information. Verify that it was successful and there are no issues.  


Importing the full certificate


1) Login to your DigiCert® Management Console 

2) Downlaod your SSL certficate file (your_domain_name.p7b) to the vCommander directory (Program Files\Embotics\vCommander\jre\bin)

The p7b file should contain the full chain of the certificate (primary and intermediate). 

3) Run the following command to import 

Navigate to: c:\Program Files\Embotics\vCommander\jre

Run the following command or follow your CA instructions as needed: 

keytool -import -alias tomcat -keystore “..\..\tomcat\conf\keystore” -trustcacerts -file your_site_name.p7b -storepass changeit

4) Once completed, you will receive the following confirmation: "Certificate reply was installed in keystore"

5) You will be asked if you want to trust the certificate, Chose or yes.

6) Restart vCommander Windows Service and test the new certificate information. Verify that it was successful and there are no issues.  

 

See Also