Maintaining the Domain › Manage Certificates › About Creating a Self-Signed Certificate

About Creating a Self-Signed Certificate

You can replace the self-signed certificate that comes with CA Process Automation. The predefined certificate is configured in the OasisConfig.properties file. When you create your own self-signed certificate, update this properties file and run a batch file to sign the Jar files (or Java ARchive).

Before you create your own certificate, plan values for the keystore path and keystore alias. You enter these values when you run the keytool and when you update the properties file.

You use the following files and utilities to implement your own self-signed certificates:

• keytool utility

  Note: For details about this Java Sun utility, browse for keytool - Key and Certificate Management Tool.

• PasswordEncryption.bat
• SignC2OJars.bat
• OasisConfig.properties file, specifically, the following three parameters
  • itpam.web.keystorepath=

    Default:

    install_dir/server/c2o/.config/c2okeystore

    Note: The default is the self-signed keystore path,

  • itpam.web.keystore.password=

    The default points to encrypted DomainID. (Run the PasswordEncryption.bat file, enter the keystore password. The batch program generates the encrypted password on the console, which you specify here as the new value.)

  • itpam.web.keystorealias=

    Default: ITPAM

More information:

Oasis Configuration Properties File