Exporting a PKCS 12 certificate from the cmsweb.jks certificate

Last Updated : Sep 25, 2024 |
Prolog information
Metadata
Keywords:
This procedure is an example of how you can export a PKCS 12 certificate from the cmsweb.jks certificate. Note the full path and the password for the certificate. You will need this path and password to enable TLS/SSL encryption or to update the TLS/SSL encryption certificate.
Before you begin
Generate and install the cmsweb.jks certificate. For more information about Web Client certificates, see Maintaining and Troubleshooting Avaya Call Management System.
  1. Log in to the CMS server with root privileges.
  2. Choose a location on your CMS server to store the certificate.
  3. Run the following command:
    ADDITIONAL INFORMATION: keytool -J-Dkeystore.pkcs12.legacy 
    -importkeystore -srckeystore /opt/cmsweb/cert/cmsweb.jks
    -destkeystore cmsweb.p12 -deststoretype PKCS12 -srcstoretype 
    JKS -srcstorepass <SOURCE_PASSWORD> -srcalias <SOURCE_ALIAS> 
    -deststoretype PKCS12 -destkeypass <CERT_PASSWORD> -deststorepass 
    <CERT_PASSWORD> -destalias cms_net_encrypt
    • <SOURCE_PASSWORD> is the password for the JKS truststore. For the default Avaya-provided JKS, the default password is cmsweb.
    • <SOURCE_ALIAS> is the alias for the JKS truststore. For the default Avaya-provided JKS, the alias is cmsweb1.
    • <CERT_PASSWORD> is the password for the PKCS 12 truststore or certificate you are generating.
  4. Optional: If you do not know the source alias, run the following command to find it:
    ADDITIONAL INFORMATION: keytool -list -v -keystore /opt/cmsweb/cert/cmsweb.jks -storepass <SOURCE_PASSWORD> | grep Alias