Administration Guide › Set Up Encryption › About the DXcertgen Tool › Specify a Keystore for DXcertgen

Specify a Keystore for DXcertgen

CA Directory is shipped with a keystore for DXcertgen to use. You can specify this keystore, or another one, for DXcertgen to use to store the root certificate and key pair.

To Specify a Keystore for DXcertgen

1. Store the certificate and private key in a keystore

   You can use the keytool command to do this.

2. When you run DXcertgen, specify the path to the keystore and the root alias of the certificate you created.

Example: Using a Previously Created Root Certificate Stored in a Keystore

Assume you have stored a certificate and private key as follows:

• The keystore is DXHOME/config/ssld/javakeystores
• The access password to the keystore is keystorePassword
• The stored certificate has an alias myalias

The following command then causes DXcertgen to use that certificate to create certificates and private keys for all configured DSAs:

dxcertgen -a myalias -s DXHOME/config/ssld/javakeystores -S keystorePassword

More information:

dxcertgen importca Command—Import a Certificate