HP 800 User Manual page 436

System Administration
Creating and Replacing SSL Certificates
15-28
keytool -import -alias <CA_alias> -file <ca_root_cert_file>
-keystore /usr/local/java/jre/lib/security/cacerts
Where:
<CA_alias> is an alias unique to your cacerts file and preferably identifies
the CA to which it pertains
<ca_root_cert_file> is the file containing the CA's root certificate
6. keytool prompts for the password for the cacerts file, which should be
the default: changeit.
7. If you are prompted, enter yes to trust the certificate.
8. Once you get your signed certificate back from the CA, import it into your
keystore (see "Copying Files" on page 1-20), replacing the previously self-
signed public certificate for your key by entering the following command
on the command line of the NAC 800 server:
keytool -import -alias <key_alias> -trustcacerts -file
<signed_cert_file> -keystore /usr/local/nac/keystore/
compliance.keystore
Where:
<key_alias> is the name for the key within the keystore file
<signed_cert_file> is the name of the file containing your CA-signed
certificate
9. keytool prompts for the password for the keystore_filename file, which
is the password used when the keystore was created.
10. Save and exit the file.