Page History
| Created Date | Updated Date | Affects version | Fix Version |
|---|---|---|---|
|
| All |
Description
These general instructions can be used to install a new SSL certificate on a BMC server.
Instructions
Check current certificate from BMC Keystore:
| Code Block |
|---|
keytool -list -v -keystore “C:\Program Files\Blancco\Blancco Management Console\apache-tomcat\conf\keystore.jks” |
...
| ui- |
|---|
...
| tabs | |||||
|---|---|---|---|---|---|
|
- Stop the BMC service.
- (OPTIONAL) Create a new keystore/keypair.
- Create a new CSR for the existing BMC self-signed cert or for your new keystore/keypair.
- Import signed cert keychain or root and intermediate CA in to your keystore.
- Import CA-signed certificate and apply the same to the keypair.
- Update the "keystoreFile" and "keystorePass" values in the server.xml file located under "\Blancco Management Console\apache-tomcat\conf" to reflect any changes associated with key/cert.
- Restart the BMC service.
|
...
|
...
|
...
| Code Block | ||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
$JAVAHOME\bin>keytool -keystore "<path to>\<keystore_name>.jks" -genkeypair -keyalg RSA -keysize 2048 -validity <#of days> -dname "cn=<domain name>, ou=<yourOrgUnit> , o=<yourOrgOrCompany>, l=<City/locality>, st=<State
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
| Content by Label | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
...