Creating new keystores

The following topics provide information and instructions for creating new keystores:

• • To create a new keystore
  • Locations of keystore and truststores
  • Example of creating a new keystore

To create a new keystore

1. Create a new keystore by using a new password to secure the certificate: 

   
   keytool -genkey -alias tomcat -keyalg RSA -keystore tomcatInstallationDirectory/keystore.p12
2. After the keystore has been created, update the server.xml file with the new password for the keystore.

For details, see the Tomcat documentation at http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html#SSL (http://tomcat.apache.org/tomcat\-6.0\-doc/ssl\-howto.html#SSL) and Tomcat.

Locations of keystore and truststores

With the BMC Atrium Single Sign-On default installation, the keystore and truststores are in the following locations:

• Keystore:
  <installationDirectory>/tomcat/conf/keystore.p12
• Tomcat truststore:
  <installationDirectory>/tomcat/conf/cacerts.p12
• JVM truststore:
  <installationDirectory>/jvm/jre/lib/security/cacerts.p12

Example of creating a new keystore

The following is an example of how to create a new keystore: