This step must be repeated on all agent and manager host machines.
Read the certificate that is associated with your alias from the keystore, and store it in a hostCertFile:
$ keytool -export -alias alias -file hostCertFile -storetype jks -keystore yourHome/.keystore -storepass passPhrase -rfc |
When you are done with this step you will have a certificate for each of your host machines.