2.7.4.1 Generate Self-signed Certificate

This section describes how to generate the Self-signed certificate.

To generate the self-signed certificate:

1. Run the following jks command in the Studio Server.
   keytool -J-Dkeystore.pkcs12.legacy -genkey -alias <alias> -keyalg RSA - keystore <alias>.jks -dname "CN=<hostname>, OU=OR, O=OR L=OR, ST=OR, C=OR" -ext "SAN=IP:<ip address 1>,IP:<ip address 2>"

   Note:

   • ip address 2 is optional and hostname is the fully qualified host name.
   • You must use the same password and alias that is provided in the config.sh file.
2. Specify the keystore password.
3. When generating the keytool ensure to provide the hostname in the first name.
   Question: What is your first and last name?
   Answer: Provide the fully qualified studio server hostname.
   For example: <hostname>.<domain name>
4. Specify any name for the other questions.
5. Specify the keystore password. The jks file is created in the Studio Server.

   Note:

   You must use the same password and alias that is provided in the config.sh file.
6. Run the following jks command in the Studio Server to generate the .p12 file using the .jks file:

   keytool -J-Dkeystore.pkcs12.legacy -importkeystore -srckeystore
   <alias>.jks -destkeystore <alias_name>.p12 -srcalias <alias> -
   srcstoretype jks -deststoretype pkcs12

7. Specify the keystore password. The .p12 file is created in the Studio Server.
8. Copy the .p12 files and place in the <COMPLIANCE_STUDIO_INSTALLATION_PATH>/mmghome/ mmg-studio/confdirectory.