Importing a Keystore Using WLST Changing the Keystore Password Using Fusion Middleware Control

8-12 Oracle Fusion Middleware Administrators Guide

8.3.5.2 Generating a New Key for the Keystore Using WLST

Assuming the instance name is inst1, use this command to generate a new key for a keystore: generateKeyinst1, ovd5, ovd, newKeystore, password, subject_dn, key_ size, alias where password is the password for this keystore, subject_dn is the distinguished name by which the key pair is generated, key_size is the key size in bits, and alias is the key alias.

8.3.5.3 Generating a Certificate Signing Request Using Fusion Middleware Control

Take these steps to create a Certificate Signing Request CSR: 1. From the navigation pane, locate your component instance. 2. Navigate to component_name, then Security, then Keystores. 3. Select the desired keystore from the list of stores. 4. A dialog box appears in which you must enter the keystore password to continue. 5. The Manage Certificates page appears. Select the self-signed certificate for which you want to generate the CSR and click Generate CSR. 6. A dialog box appears, showing the generated signing request. You can either: ■ Copy the CSR from the dialog box and past it to a file. ■ Click the Export CSR button to directly save it to a file. Managing Keystores, Wallets, and Certificates 8-13

8.3.5.4 Generating a Certificate Signing Request Using WLST

Assuming the instance name is inst1, use this command to generate and export a CSR: exportKeyStoreObjectinst1, ovd5, ovd, newKeystore, password, CertificateRequest, tmp, alias where password is the password for this keystore, tmp is the path under which the certificate request is generated in BASE64 format in the file base64.txt, and alias is the alias of the key pair that is used to generate the certificate request. 8.3.5.5 Importing a Certificate or Trusted Certificate into a Keystore Using Fusion Middleware Control Take these steps to import a certificate, or a trusted certificate, into a keystore: 1. From the navigation pane, locate your component instance. 2. Navigate to component_name, then Security, then Keystores. 3. Select the desired keystore from the list of stores. 4. A dialog box appears in which you must enter the keystore password to continue. 5. The Manage Certificates page appears. Click the Import button. 6. A dialog box appears with which you can either: ■ Paste the Base-64 encoded contents of a certificate or trusted certificate into the keystore directly. ■ Select a certificate or trusted certificate file from the file system. You need to specify an alias while importing a certificate. When importing a certificate, the alias should match the alias of the corresponding keypair. When importing a trusted certificate, the alias should be unique in the keystore. 7. Click OK. The Manage Certificates page appears, showing the newly imported certificate or trusted certificate. Note: You cannot use Fusion Middleware Control to import DER-encoded certificates or trusted certificates into a JKS keystore; use the keytool utility for this task.