Importing Certificates in Java Keystore for REN Java Clients

In order for REN Java clients, such as a queue server, MCF Log server, or CTI adapter, to communicate with an SSL-enabled REN server, these clients need to have SSL certificates available in a Java keystore. You must import the REN server certificates into the keystore used by each REN Java client. For the Queue servers and MCF Log servers, this will be the keystore used by the JRE in the PeopleSoft domain where the queue server and MCF Log server are running.  For CTI adapters, this will be the JRE used by the adapter.

The following example shows how to install the REN server certificates into the JRE trust store for a queue server and MCF log server. You will need to repeat this procedure for every queue server domain being used.  You will also need to perform a similar procedure for CTI adapters or any other REN Java client, if you are using them. 

Note:

If you have configured client authentication, you will need to import client certificates into the JRE keystore.

To import certificates in Java keystore:

1. Open a command prompt.

2. Enter the following command:

   <PS_HOME>\jre\bin\keytool -import -trustcacerts -alias <alias-name> 
   -file <CA Certificate Pem file> -keystore <full path to keystore used by the REN Java client> 
   -storepass <password>

   Example:

   <PS_HOME>\jre\bin\keytool -import -trustcacerts -alias PSFTCA -file ca.pem 
   -keystore <PS_HOME>\jre\lib\security\cacerts -storepass changeit

Note:

You will get an error message, sslv3 alert certificate unknown, if the certificate is not imported correctly.

See Security Administration: Implementing Client Authentication.