Receiving the signed certificate by using keytool

Edit online

You can use the keytool command, which opens a command-line, to manage certificate keys and receive signed certificates.

Procedure

Verify that the Personal Signed Certificate is in the appropriate directory by using the keytool command. Complete the following steps:
1. Issue the following command:
```
keytool -list -keystore gui-truststore.jks
```
  Tip: You might have to specify the full path to the keytool command. The commands are located in the following directory, where installation_dir represents the directory in which the Operations Center is installed:
  installation_dir/ui/jre/bin
  
  installation_dir\ui\jre\bin
2. A message displays the name of the Personal Signed Certificate, usr-cert-name, that is in the truststore file.
Add the CA root certificate and any intermediate certificates to the truststore file by issuing the following commands. If you received intermediate certificates from the CA, you must add them to the truststore file before you add the CA root certificate.
```
keytool -import -file intermediate_certificate_file
 -keystore gui-truststore.jks -alias ca-intermediate
```
```
keytool -import -file root_certificate_file
 -keystore gui-truststore.jks -alias ca-root
```
where:

-file certificate_file

Specifies the name of the file that contains the certificate.

-alias ca-intermediate

Identifies the intermediate certificate by its label.

-alias ca-root

Identifies the CA root certificate by its label.
Receive the signed certificate by issuing the following command:
```
keytool -importcert -keystore gui-truststore.jks
 -file signer_certificate_file -alias myKey
```
where:

-file signer_certificate_file

Specifies the name of the file that contains the signed certificate.

-alias

The alias for the signed certificate. The alias must be the same one that was used when you generated the certificate signing request (CSR).
Delete the self-signed certificate that is currently used by the Operations Center, and replace it with the CA-signed certificate, by completing the following steps:
1. To delete the existing self-signed certificate, issue the following command:
```
keytool -delete -alias default -keystore gui-truststore.jks
```
  where:
  
  -alias default
  
  Identifies the CA-signed certificate by its label.
2. To rename the CA-signed certificate, usr-cert-name, to default, issue the following command:
```
keytool -changealias -keystore gui-truststore.jks -alias usr-cert-name
 -destalias default 
```
  where:
  
  -alias usr-cert-name
  
  Identifies the CA-signed certificate by its label.
  
  -destalias default
  
  Specifies that default is the new label for the CA-Signed certificate.
Start the Operations Center web server by following the instructions in Starting and stopping the web server.