Import the Root and Intermediate Certificates into the Trust Keystores

The root and intermediate certificates (certificate chain) must be accessible in Java Standard Trust Keystore for the Costpoint Configuration Utility and Configured Trust Keystore for WebLogic in order for Costpoint to verify the GovWin IQ Web Server Authentication Certificate.

Tip: The default Trust Keystore for WebLogic is the Demo Trust Keystore. If your Costpoint installation is using a different Trust Keystore for WebLogic, you need to modify the references to the DemoTrust.jks file in the commands below. You will also need to ensure you are using the correct path to your JDK and WebLogic keystore files.
Note: You must replace the following values in the commands with applicable information:
  • <Costpoint Install Directory> is the folder location of your Costpoint installation.
  • <server_domain> is the Active Directory Domain of your Costpoint application server.
  • <root_cert_file> is the name you assigned to the root certificate file that you exported.
  • <intermediate_cert_file> is the name you assigned the intermediate certificate file when exporting.

To import the root and intermediate certificates into the Trust Keystore:

  1. Click Start > All Programs > Accessories, right-click Command Prompt, and click Run as administrator.
    The command prompt opens with administrative rights.
  2. Enter the following command to set the environment for using keytool: <Costpoint Install Directory>\71\bin\CPWebSetEnv.cmd
  3. Enter the following command to import the root certificate into the Standard Java Trust Keystore: keytool -import -v -noprompt -trustcacerts -alias <server_domain>_root -file <root_cert_file>.cer -keystore D:\oracle\jdk1.8.0_212\jre\lib\security\cacerts -storepass changeit
  4. Enter the following command to import the intermediate certificate(s) into the Standard Java Trust Keystore: keytool -import -v -noprompt -trustcacerts -alias <server_domain>_intermediate -file <intermediate_cert_file>.cer -keystore D:\oracle\jdk1.8.0_212\jre\lib\security\cacerts -storepass changeit
  5. Enter the following command to import the root certificate into the Demo Trust Keystore: keytool -import -v -noprompt -trustcacerts -alias <server_domain>_root -file <root_cert_file>.cer -keystore D:\Oracle\Middleware12.2.1.3\wlserver\server\lib\DemoTrust.jks -storepass DemoTrustKeyStorePassPhrase
  6. Enter the following command to import the intermediate certificate(s) into the Demo Trust Keystore:
    keytool -import -v -noprompt -trustcacerts -alias <server_domain>_intermediate -file <intermediate_cert_file>.cer -keystore D:\Oracle\Middleware12.2.1.3\wlserver\server\lib\DemoTrust.jks -storepass DemoTrustKeyStorePassPhrase