task_import_ca_certificate_to_unix_plugin_hosts.adoc

permalink	sidebar	keywords	summary
install/task_import_ca_certificate_to_unix_plugin_hosts.html	sidebar	security,authentication,import CA certificates	You should import the CA certificate to the UNIX plug-in hosts.

Import CA Certificate to the UNIX plug-in hosts

You should import the CA certificate to the UNIX plug-in hosts.

About this task

• You can manage the password for SPL keystore, and the alias of the CA signed key pair in use.

• The password for SPL keystore and for all the associated alias password of the private key should be same.

Steps

1. You can retrieve SPL keystore default password from SPL property file. It is the value corresponding to the key SPL_KEYSTORE_PASS.

2. Change the keystore password: $ keytool -storepasswd -keystore keystore.jks

3. Change the password for all aliases of private key entries in the keystore to the same password used for the keystore: $ keytool -keypasswd -alias "<alias_name>" -keystore keystore.jks

4. Update the same for the key SPL_KEYSTORE_PASS in spl.properties` file.

5. Restart the service after changing the password.