Adding certificates to keystore

Detailed procedure to add certificates to IVIG Role Optimizer keystore.

Adding certificates to keystore

  1. Copy the certificate to be added to the keystore to a location on the server. For example: /tmp directory.
  2. Navigate to the JAVA_HOME directory on the setup. For example, cd /opt/ibm/java-x86_64-80/jre/bin
  3. Import the certificate into keystore at location /opt/ibm/identity/cert/igicertstore.jks file using the following command.

    keytool -import -trustcacerts -file <filename> -alias <alias> -keystore /opt/ibm/identity/cert/igicertstore.jks -storepass <keystore_password>

    Here: keystore_password is the password provided during the deployment of IVIG RO (See Deployment topic, step 10).

    For example:

    keytool -importcert -trustcacerts -file /tmp/providercert.cer -alias sso -keystore /opt/ibm/identity/cert/igicertstore.jks -storepass Passw0rd