Deployment Guide

11. Highlight the desired certificate, right-click All Tasks > Export.
12. When the Certificate Export wizard opens, click Next.
13. Select Yes, export the private key and click Next.
14. Select Personal Information Exchange - PKCS #12 (.PFX) and then select the sub-options Include all certificates in
the certification path if possible and Export all extended properties. Click Next.
15. Enter and confirm a password. This can be any password of your choosing. Choose a password that is easy for you to
remember, but no one else. Click Next.
16. Click Browse to browse to the location of where you would like to save the file.
17. In File Name, enter a name to save the file as. Click Save.
18. Click Next.
19. Click Finish.
A message stating that the export was successful displays. Close the MMC.
Add a Trusted Signing Cert to the Security Server
when an Untrusted Certificate was used for SSL
1. Stop the Security Server service, if running.
2. Back up the cacerts file in <Security Server install dir>\conf\.
Use Keytool to complete the following:
3. Export the trusted PFX into a text file and document the Alias:
keytool -list -v -keystore "
4. Import the PFX into the cacerts file in <Security Server install dir>\conf\.
keytool -importkeystore -v -srckeystore "
5. Modify the keystore.alias.signing value in <Security Server install dir>\conf\application.properties.
keystore.alias.signing=AliasNamePreviouslyDocumented
Start the Security Server service.
Certificates
93