Exporting a Keystore Using WLST Deleting a Keystore Using Fusion Middleware Control

Managing Keystores, Wallets, and Certificates 8-11 ■ Exporting a Certificate or Trusted Certificate from the Keystore Using Fusion Middleware Control ■ Exporting a Certificate or Trusted Certificate from the Keystore Using WLST ■ Deleting a Certificate or Trusted Certificate from the Keystore Using Fusion Middleware Control ■ Deleting a Certificate or Trusted Certificate from the Keystore Using WLST ■ Converting a Self-Signed Certificate to a Third-Party Certificate Using Fusion Middleware Control ■ Converting a Self-Signed Certificate to a Third-Party Certificate Using WLST

8.3.5.1 Generating a New Key for the Keystore Using Fusion Middleware Control

To generate a new key that is, a new self-signed certificate for a keystore: 1. Navigate to the Java Keystores page for the component instance, as explained in Section 8.3.3.1, Creating a Keystore Using Fusion Middleware Control. 2. Select the keystore from the list of stores. 3. A dialog box appears in which you must enter the keystore password to continue. 4. The Manage Certificates page appears. Here, you can manage both types of keystore entries, that is, certificates and trusted certificates. 5. Click the Generate Keypair button. 6. In the Generate Keypair dialog, enter the details for the new key and click OK. Example: Generating a Key Pair When you complete these steps, a new public-private key pair is generated for the keystore, and the public key is wrapped in a self-signed certificate. While these steps generate a new keypair for an existing keystore, you can also generate a new keypair when creating the keystore itself. For details, see Section 8.3.3.1, Creating a Keystore Using Fusion Middleware Control. 8-12 Oracle Fusion Middleware Administrators Guide

8.3.5.2 Generating a New Key for the Keystore Using WLST

Assuming the instance name is inst1, use this command to generate a new key for a keystore: generateKeyinst1, ovd5, ovd, newKeystore, password, subject_dn, key_ size, alias where password is the password for this keystore, subject_dn is the distinguished name by which the key pair is generated, key_size is the key size in bits, and alias is the key alias.

8.3.5.3 Generating a Certificate Signing Request Using Fusion Middleware Control

Take these steps to create a Certificate Signing Request CSR: 1. From the navigation pane, locate your component instance. 2. Navigate to component_name, then Security, then Keystores. 3. Select the desired keystore from the list of stores. 4. A dialog box appears in which you must enter the keystore password to continue. 5. The Manage Certificates page appears. Select the self-signed certificate for which you want to generate the CSR and click Generate CSR. 6. A dialog box appears, showing the generated signing request. You can either: ■ Copy the CSR from the dialog box and past it to a file. ■ Click the Export CSR button to directly save it to a file.