Using HTTPS with Single Sign-On › How to Set Up HTTPS for CA Single Sign-On › Set Up SSL Certificates › Import a Key and an Existing Certificate

Import a Key and an Existing Certificate

You can use a private key and public certificate (either a self-signed or a Certificate Authority certificate) from a different source. For example, your security team provides an SSL certificate that is customized for your organization. To use this SSL certificate, import the private key and the signed certificate.

Follow these steps:

1. Run the following command:

   cd /opt/CA/PerformanceCenter/jetty-version/etc
   

2. Remove the old keystore using the command:

   rm keystore
   

3. Create a PKCS#12 keystore from the private key and certificate using the following command:

   openssl pkcs12 -export -in certificate.pem -inkey privatekey.pem -name MyAlias 
   -out keystore.pkcs12
   

   certificate.pem

   Specifies the certificate provided to you.

   privatekey.pem

   Specifies the private key provided to you.

   Note: This command works on Linux only.

4. Import the key and certificate into the CA Performance Center keystore using the following command:

   keytool -importkeystore -destkeystore keystore_file -deststorepass storepasswd 
   -srckeystore keystore.pkcs12 -srcstoretype pkcs12 -srcalias src_alias_name 
   -destalias dest_alias_name -destkeypass keypasswd
   

5. Restart each CA Performance Center service using these commands:

   /sbin/service caperfcenter_sso restart
   

   /sbin/service caperfcenter_devicemanager restart
   

   /sbin/service caperfcenter_console restart
   

   Your existing SSL certificate is imported into the keystore.

Next step: Configure the port and website to support HTTPS.

Note: Import the certificate into the Java cacerts keystore if the certificate does not include a chain that terminates at a certificate in the keystore. Run the following command to determine whether the certificate includes the chain:

keytool -printcert -file filename

filename

Specifies the name of the certificate.

See Generate and Import a Certificate for instructions on importing a certificate into the Java cacerts keystore.