B.1 Creating a Keystore

A keystore can be created using the Java* “keytool” executable, which comes with any JRE* installation. This keystore holds a public and private keypair that can be used to replace the default certificate that comes with Identity Audit. There are basic instructions below, but for more info on keytool, see the Sun* Web site.

  1. Go to the /bin directory for Java (for example, $JAVA_HOME/bin).

  2. Run the following command:

    keytool -genkey -alias alias -keystore .keystore

  3. Enter a password for the keystore. This password is used when you import the truststore.

  4. Enter the following information:

    • First and last name

    • Organizational unit

    • Organization

    • City or locality

    • State or province

    • Two-digit country code

  5. Verify the information.

  6. Press Enter to use the same password as the keystore password.

    A .keystore file is created with a private key and corresponding public key (certificate).