SSL certificate management with certTool

Use the certTool utility to manage private keys and certificates.

Starting certTool
To start the certificate configuration tool named certTool for the adapter, complete these steps:
Generating a private key and certificate request
A certificate signing request (CSR) is an unsigned certificate that is a text file.
Installing the certificate
After you receive your certificate from your trusted CA, install it in the registry of the adapter.
Installing the certificate and key from a PKCS12 file
If the certTool utility did not generate a CSR to obtain a certificate, you must install both the certificate and private key.
View of the installed certificate
To list the certificate on your workstation, type D at the Main menu of certTool.
Installing a CA certificate
If you use client authentication, you must install a CA certificate that is provided by a certificate authority vendor. You can install a CA certificate that was extracted in a temporary file.
Viewing CA certificates
Use the certTool utility to view a private key and certificate that are installed the adapter.
Deleting a CA certificate
You can delete a CA certificate from the adapter directories.
Viewing registered certificates
The adapter accepts only the requests that present a registered certificate when client validation is enabled.
Registering a certificate
You can register a certificate for the adapter.
Unregistering a certificate
You can unregister a certificate for the adapter.
Exporting a certificate and key to a PKCS12 file
You can export a certificate and key to a PKCS12 file.

Parent topic: Configuring