The eG Installation Guide - eG Innovations

Installing and Configuring on Windows Environments
3.4.2 Extracting the Certificate to a Certificate File
To SSL-enable the eG agent-manager communication, you need to import the SSL certificate you
generate into the JRE of the eG agent. For this, you first need to extract the certificate from the
keystore file and export it to a certificate file. To achieve this, do the following:
1. Login to the eG manager and go to the command prompt.
2. Execute the following commands one after another:
cd %JAVA_HOME%\bin
keytool -export -alias egitlab1 -keystore .keystore –storepass mykey -keypass mykey -file
C:\tmp\eGCert.cer
The text in Bold in the above command line indicates those inputs that can change according to
the requirements of your environment. These inputs have been described below:
-alias : the alias name of the certificate being extracted; make sure that you provide the same alias
name that you provided while generating the keystore file (see Section 3.4.1 of this document).
-keypass : the password used to protect the key that was generated; make sure that you provide
the same password that you provided while generating the keystore file (see Section 3.4.1 of this document).
Also, note that -storepass and -keypass should be the same.
-keystore : Provide the name of the keystore file in which the key has been stored; specify the
same file name that you used to store the key (see Section 3.4.1 of this document).
-file : Specify the full path to and the name of the certificate file (.cer) to which the certificate
has to be exported
3. Once the keytool command successfully executes, the certificate file will be created.
3.4.3 Requesting a Certificate Authority for a Valid Certificate
Self-signed certificates are useful in environments where 'security' is not a priority. In highly secure
environments, especially where the eG manager is to be frequently accessed via the public internet,
using a self-signed certificate may not be preferred. In such a case, you can request for a valid
certificate from a certificate authority. The procedure for this is as follows:
4. Login to the eG manager and go to the Windows command prompt.
Execute the following commands one after another:
cd %JAVA_HOME%\bin
keytool -certreq -alias egitlab1 -file -keypass mykey -keystore
.keystore –storepass mykey
The text in Bold in the above command line indicates those inputs that can change according to
the requirements of your environment. These inputs have been described below:
237