Previous Topic: Generate the Root CertificateNext Topic: Deploy CA Data Protection Machines

Platform Deployment Guide › Advanced Encryption Mode › How Do I Deploy CA Data Protection In Advanced Encryption Mode? › Generate the Key Store and Revocation List

Generate the Key Store and Revocation List

To generate the Key Store and Revocation List files, you run a batch file supplied with the CA Data Protection distribution media.

To generate the Key Store and Revocation List files

  1. On your designated secure server, browse to the \AdvancedEncryption folder.
  2. Run GenerateKeyStore.bat.
  3. When prompted, enter the root certificate passphrase.

    The batch file now generates keystore.dat and revocation.properties. These files are saved in the \AdvancedEncryption\output subfolder on your secure server.

    The enterprise-wide certificate is stored in keystore.dat and has a serial number of 1.

    The certificate itself is saved as server1.crt. It is saved in the \AdvancedEncryption\persist subfolder on your secure server.

More information:

Folders Used By Certificate Scripts