HP Servicecontrol Manager 3.0 User's Guide

Increasing Servicecontrol Manager Security
Replace Self-Signed Tomcat Certificates
Chapter 4
57
Step 6. Use the new certificates file created in step 5 to generate a request for the certificate
authority:
# keytool -certreq -alias tomcat –keystore \
/etc/opt/mx/config/security/certificates -keypass password \
-file mycert.csr
where password is the MxKeystorePassword. The file mycert.csr will be created and
will contain the command output.
Step 7. Submit the output to a certificate authority to get a CA-signed certificate. You may want
to store this certificate as a file, for example, mynewcert.crt.
Step 8. Import the new CA-signed certificate:
# keytool -import -alias tomcat -file mynewcert.crt -keystore \
/etc/opt/mx/config/security/certificates -keypass your_password
where mynewcert.crt is the filename for the new certificate and your_password is the
MxKeystorePassword.