Step Six: Import the Trusted Root Certificate

For this step, you will need a JDK to use keytool. If a JRE was installed with iManager, you will need to download a JDK to use the keytool.

You now need to import the Trusted Root Certificate into your cacerts or jssecacerts trust store file.

  1. Find the cacerts or jssecacerts file in the lib\security folder (relative to your Java home folder).

  2. Find keytool in the \bin folder (relative to your Java home folder).

    IMPORTANT:  You must use keytool that comes with JVM 1.3 or later. The keytool that comes with JVM 1.2.2 or earlier will not work.

  3. Execute the following keytool command (platform specific):


    On NetWare

    keytool -import -alias [alias_name] -file [full_path]\trustedrootcert.der -keystore sys:java\lib\security\cacerts


    On Windows

    keytool -import -alias [alias_name] -file [full_path]\trustedrootcert.der -keystore keystore [full_path]\jre\lib\security\cacerts


    On UNIX

    keytool -import -alias [alias_name] -file [full_path]/trustedrootcert.der -keystore[full_path]/jre/lib/security/cacerts

    Replace [alias_name] with a unique name for this certificate and make sure you include the full path to trustedrootcert.dir and cacerts.

    IMPORTANT:  You will be prompted for a keystore password. If you haven't changed it, the default is "changeit".