The eG Installation Guide - eG Innovations

Installing and Configuring on Unix
The text in Bold in the above command line indicates those inputs that can change according to
the requirements of your environment. These inputs have been described below:
-alias : the alias name of the certificate being extracted; make sure that you provide the same alias
name that you provided while generating the keystore file (see Section 2.2.1 of this document).
-keypass : the password used to protect the key that was generated; make sure that you provide
the same password that you provided while generating the keystore file (see Section 2.2.1 of this document).
Also, note that -storepass and -keypass should be the same.
-keystore : Provide the name of the keystore file in which the key has been stored; specify the
same file name that you used to store the key (see Section 2.2.1 of this document).
-file : Specify the full path to and the name of the certificate file (.cer) to which the certificate
has to be exported
3. Once the keytool command successfully executes, the certificate file will be created.
2.2.3 Requesting a Certificate Authority for a Valid Certificate
Self-signed certificates are useful in environments where 'security' is not a priority. In highly secure
environments, especially where the eG manager is to be frequently accessed via the public internet,
using a self-signed certificate may not be preferred. In such a case, you can request for a valid
certificate from a certificate authority. The procedure for this is as follows:
Login to the eG manager and go to the shell prompt.
Execute the following commands one after another:
cd $JAVA_HOME/bin
keytool -certreq -alias egitlab1 -file -keypass mykey -keystore
.keystore –storepass mykey
The text in Bold in the above command line indicates those inputs that can change according to
the requirements of your environment. These inputs have been described below:
-alias : the alias name of the certificate being requested; make sure that you provide the same alias
name that you provided while generating the keystore file (see Section 2.2.1 of this document).
-file : Provide a name for the text file to which the certificate request will be saved.
-keypass : the password used to protect the key that was generated; make sure that you provide
the same password that you provided while generating the keystore file (see Section 2.2.1 of this document).
Also, note that -storepass and -keypass should be the same.
-keystore : Provide the name of the keystore file in which the key has been stored; specify the
same file name that you used to store the key (see Section 2.2.1 of this document).
If this command executes successfully, then a certificate will be issued by a certifying authority.
38