C.3 Generating Client Keystores for OAM Tester in Cert Mode

Generate JKS keystores to be used with OAM Tester that is in Cert mode only, else skip this topic.

This section describes how to use importcert commands to generate client keystores for OAM Tester in Cert mode to contain the imported trusted certificate chain.

See Also:

The Importcert Tool

To generate client keystores for OAM Tester in Cert mode

Use ImportCert tool to create JKS keystores (file name specified by -privatekeyfile and -signedcertfile). For example:

- java -cp importcert.jar
oracle.security.am.common.tools.importcerts.CertificateImport -keystore <Keystore path> -privatekeyfile <Private key file> -signedcertfile  <Signed certificate file> path -storetype <JKS> genkeystore <yes>

Enter the keystore password when prompted.

Proceed as needed for your environment:
- Configuring Cert Mode Communication for Access Manager
- Configuring Simple Mode Communication with Access Manager
Remove a Keystore: Use the following command to remove the JKS keystore. For example:
```
keytool -delete -alias <alias> -keystore  <path to clientkey.JKS> -storetype <JKS> 
 
```
Enter the keystore password when prompted.