Using the keytool utility
The keytool utility is used to obtain a digitally signed identity certificate to replace the self-signed certificate. This utility is available with Oracle JDKs and BMC Atrium Atrium Single Sign-On. The keytool utility must be available within the shell command environment to generate a certificate signing request (CSR) or to import a CA signed certificate.
To verify that the keytool utility is available
- Open a shell command window.
At the command prompt, type keytool, and press Enter.
If the keytool utility is available, a help message is generated that shows the keytool options.
The following is the help output relevant to generating the CSR:
-certreq [-v] [-protected]
[-alias <alias>] [-sigalg <sigalg>]
[-file <csr_file>] [-keypass <keypass>]
[-keystore <keystore>] [-storepass <storepass>]
[-storetype <storetype>] [-providername <name>]
[-providerclass <provider_class_name> [-providerarg <arg>]] ...
[-providerpath <pathlist>]- If the tool is available, proceed with the instructions for Obtaining and importing CA certificates.
If the tool is not available, update the command shell environment to include the following path:
<installationDirectory>/BMC Software/AtriumSSO/jdk/bin
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*