Blackberry PRD-07630-011 Monitoring Guide - Page 45

Import a new SSL certificate for the BlackBerry Monitoring Service

Page 45 highlights

Monitoring Guide Import a new SSL certificate for the BlackBerry Monitoring Service The default location of the BlackBerry Monitoring Service installation is :\Program Files\Research In Motion\BlackBerry Enterprise Server\Monitoring Service. 10. Type the new password. 11. Type the name of the computer that you want to change the key store password for. 12. Press ENTER. 13. In the Windows® Services, restart the service for the BlackBerry Monitoring Service console. Example C:\Program Files\Research In Motion\BlackBerry Enterprise Server\Monitoring Service \bin>webGenKey.bat "C:\Program Files\Java\jdk1.5.0_15" "C:\Program Files\Research In Motion\BlackBerry Enterprise Server\Monitoring Service" password server01.test.rim.com Import a new SSL certificate for the BlackBerry Monitoring Service When you install the BlackBerry® Monitoring Service, the setup application generates an SSL certificate to make sure that all communication on the HTTPS connection is secure. After the installation process completes, you can choose to import a self-signed SSL certificate or a trusted certificate using the Java® keytool. For more information about the Java® key and certificate management utility called keytool, visit java.sun.com/ javase/6/docs/technotes/tools/windows/keytool.html. Before you begin: If you want to use a trusted certificate, copy the root certificate of the certification authority to the computer that hosts the BlackBerry Monitoring Service. 1. On a computer that hosts the BlackBerry Monitoring Service, in :\Program Files\Research In Motion \BlackBerry Enterprise Server\Monitoring Service\bin\web.keystore, back up the web.keystore file. 2. Open a command prompt window. 3. Use the Java keytool in :\Program Files\Java\\bin to generate a new web.keystore file and private key by typing keytool -genkeypair -alias -keypass -storepass -keystore ":\Program Files\Research In Motion\BlackBerry Enterprise Server\Monitoring Service\bin\web.keystore" where is a name that you select, is a password that you create, and is the SSL password that you specified when you installed the BlackBerry Monitoring Service. When the Java keytool prompts you for the first name and last name, type the FQDN of the computer that hosts the BlackBerry Monitoring Service. 4. If you want to use a trusted certificate, use the Java keytool to import the root certificate of the certificate authority by typing keytool -importcert -alias -file .cer -trustcacerts storepass -keystore ":\Program Files\Research In Motion\BlackBerry Enterprise Server\Monitoring Service\bin\web.keystore" where is a name that you select. 43

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69

The default location of the BlackBerry Monitoring Service installation is <
drive
>:\Program Files\Research In
Motion\BlackBerry Enterprise Server\Monitoring Service.
10.
Type the new password.
11.
Type the name of the computer that you want to change the key store password for.
12.
Press ENTER.
13.
In the Windows® Services, restart the service for the BlackBerry Monitoring Service console.
Example
C:\Program Files\Research In Motion\BlackBerry Enterprise Server\Monitoring Service
\bin>webGenKey.bat "C:\Program Files\Java\jdk1.5.0_15" "C:\Program Files\Research In
Motion\BlackBerry Enterprise Server\Monitoring Service" password server01.test.rim.com
Import a new SSL certificate for the BlackBerry Monitoring
Service
When you install the BlackBerry® Monitoring Service, the setup application generates an SSL certificate to make sure
that all communication on the HTTPS connection is secure. After the installation process completes, you can choose
to import a self-signed SSL certificate or a trusted certificate using the Java® keytool.
For more information about the Java® key and certificate management utility called
keytool
, visit
java.sun.com/
javase/6/docs/technotes/tools/windows/keytool.html
.
Before you begin:
If you want to use a trusted certificate, copy the root certificate of the certification authority to
the computer that hosts the BlackBerry Monitoring Service.
1.
On a computer that hosts the BlackBerry Monitoring Service, in <
drive
>:\Program Files\Research In Motion
\BlackBerry Enterprise Server\Monitoring Service\bin\web.keystore, back up the
web.keystore file
.
2.
Open a command prompt window.
3.
Use the Java keytool in <
drive
>:\Program Files\Java\<
JRE_version
>\bin to generate a new
web.keystore
file and
private key by typing
keytool -genkeypair -alias <
alias_name
> -keypass <
password
> -storepass <
keystore
password
> -keystore "<
drive
>:\Program Files\Research In Motion\BlackBerry Enterprise Server\Monitoring
Service\bin\web.keystore"
where <
alias_name
> is a name that you select, <
password
> is a password that you
create, and <
keystore password
>is the SSL password that you specified when you installed the BlackBerry
Monitoring Service.
When the Java keytool prompts you for the first name and last name, type the FQDN of the computer that hosts
the BlackBerry Monitoring Service.
4.
If you want to use a trusted certificate, use the Java keytool to import the root certificate of the certificate
authority by typing
keytool -importcert -alias <
alias_name
> -file <
root_certificate_file
>.cer -trustcacerts -
storepass <
keystore password
> -keystore "<
drive
>:\Program Files\Research In Motion\BlackBerry Enterprise
Server\Monitoring Service\bin\web.keystore"
where <
alias_name
> is a name that you select.
Monitoring Guide
Import a new SSL certificate for the BlackBerry Monitoring Service
43