Receiving the signed certificate

Edit online

After you get the signed certificate from the certificate authority (CA), you must receive the certificate in the keystore.

Procedure

To receive the signed certificate, complete the following steps:

  1. From the command line, change the directory to the keystore location.
    • On Linux®: /opt/tivoli/tsm/tdpvmware/common/webserver/usr/servers/veProfile/resources/security/
    • On Windows: C:\IBM\StorageProtect\webserver\usr\servers\veProfile\resources\security\
  2. Copy the files that you received from the CA to this location. These files include the CA root certificate, intermediate CA certificates (if any), and the signed certificate for the Data Protection for VMware vSphere GUI.
  3. Stop the Data Protection for VMware vSphere GUI service.
  4. Make a backup copy of the keystore file (key.jks) by copying it to a different name or location.
  5. Import the intermediate CA certificates, if any, with the following command. When you are prompted to trust the certificates, answer yes. Repeat this step for multiple intermediate CAs as needed. 
    keytool -importcert -alias ca-intermediate -file intermediate.pem 
-keystore key.jks -storepass password
    Where:
    -alias ca-intermediate
    The unique alias that identifies the certificate in the keystore. Each intermediate certificate must have a unique alias.
    -file intermediate.pem
    The intermediate certificate file that is obtained from the CA.
    -storepass password
    The keystore password.
  6. Import the CA root certificate by issuing the following command. When you are prompted to trust this certificate, answer yes. 
    keytool -importcert -alias ca-root -file root.pem -keystore 
key.jks -storepass password
    Where:
    -alias ca-root
    The unique alias that identifies the certificate in the keystore.
    -file root.pem
    The root certificate file obtained from the CA.
    -storepass password
    The keystore password.
  7. Import the signed certificate by issuing the following command: 
    keytool -importcert -alias mykey -file signedcert.pem -keystore 
key.jks -storepass password
    Where:
    -alias mykey
    The alias for the signed certificate. The alias must be the same one that was used when you created the keystore. For further detail on creating a new keystore and a new self-signed certificate , see Obtaining access to the keystore.
    -file signedcert.pem
    The signed certificate file received from the CA.
    -storepass password
    The keystore password.
  8. Start the Data Protection for VMware vSphere GUI service.