Certificate keystore

To create a certificate keystore, import the Public Key certificate from the keystore file. To do this:

Run the keytool program from a Java Developement Kit (JDK)¹. Issue the following command:
```
keytool -import -alias ftmswift -file inst_dir/sub_dir/cert/FTMSWIFT.cer
        -keystore keystore
```
where:

inst_dir

The directory where FTM SWIFT is installed

sub_dir

The subdirectory that includes the certificate directory. Possible values:

run

Specify this value if you create the keystore file on the installation or runtime system

admin

Specify this value if you create the keystore file on the customization system

keystore

The file name of the keystore to be created

For example:
```
keytool -import -alias ftmswift
        -file /usr/lpp/IBM/ftmswift/v300/run/cert/FTMSWIFT.cer
        -keystore /var/ftmswift_v300/run/ftmswift_keystore.jks
```
Enter a keystore password. Ensure that you remember the password as it is required to access the keystore.

Check if the displayed certificate information is identical with the one provided below. Especially, check if the certificate fingerprints match.

Owner: CN=FTMSWS CSIG, OU=Research and Development, O=IBM, C=DE
Issuer: CN=FTMSWS CSIG, OU=Research and Development, O=IBM, C=DE
Serial number: 11954d89
Valid from: Wed Oct 04 15:01:30 CEST 2017 until: Mon Oct 03 15:01:30 CEST 2022
Certificate fingerprints:
	 MD5:  C1:05:13:76:DD:70:D3:A8:89:A0:7C:AB:38:7C:35:D1
	 SHA1: 51:4F:FA:72:76:B7:6A:B5:55:88:F3:7C:70:0B:A8:36:E0:00:15:3A
	 SHA256: 8F:41:F0:CC:E8:5E:41:6A:64:CF:69:7E:11:48:FF:1C:1A:D8:11:5F:FD:25:F3:64:ED:9F:
               16:D9:CC:F5:31:AA
Signature algorithm name: SHA256withRSA
Subject Public Key Algorithm: 2048-bit RSA key
Version: 3

If the displayed information is correct, confirm that you trust this certificate

¹ You may use the JDK from Db2® or IBM® WebSphere® Application Server, if you do not have a JDK installed already.