3.6 Register server certificate

JP1/DH - AJE (Job Execution) needs the server certificate of the Data Highway - Server for Sending or Receiving files or folders.

Before you use JP1/DH - AJE (Job Execution), you should get the server certificate from Data Highway - Server that you want to send or receive files or folders, and register the server certificate to library that is used by JP1/DH - AJE (Job Execution).

You should register the server certificate to JRE on all Send/Receive clients.

The procedure of registration of the server certificate is as follows:

1. Access to the Data Highway - Server that you want to send/receive by using Web browser.

2. Click the key mark that is displayed next to the URL, and display [Website Identification] dialog box. Click the [View certificates] button. [Certificate] dialog box is displayed.

   Figure 3‒1: View certificates

3. Select [Details] tab and Click [Copy to the file...].

   Figure 3‒2: The [Certificate] dialog box

4. The [Certificate Export Wizard] dialog box is displayed. Click [Next] button.

5. The [Export File Format] dialog box will be displayed. Select [DER encoded binary X509(.CER)] from "Select the format you want to use:" Click [Next].

6. The [File to Export] dialog box is displayed. Enter file name to the File name text box and click [Next].

7. The [Completing the Certificate Export Wizard] dialog box is displayed. Click [Finish].

8. The [The export was successful] dialog box is displayed. The server certificate exports to the file that you specified on [File to Export] dialog box.

9. Run command prompt, and change current directory to the library directory under the JP1/DH - AJE (Job Execution). Then, run the following command.

   In Windows

   keytool -import -alias [The alias of server certificate]^#1 -file [The path name of the server certificate file] -keystore < Installation folder of JP1/DH - AJE (Job Execution) >\csmi\jdk\jre\lib\security\cacerts -storepass changeit

   #1

   Specify any name of server certificate to the alias of server certificate.

   For example: Installation folder of JP1/DH - AJE (Job Execution) is "C:\Program Files\HITACHI\JP1DH\AJE", and the value of CmdJreHome is "C:\AJE\server.cer":

   > cd "C:\Program Files\HITACHI\JP1DH\AJE\AJEE\csmi\jdk\jre\bin" > keytool -import -alias test1 -file "C:\AJE\server.cer " -keystore "C:\Program Files\HITACHI\JP1DH\AJE\AJEE\csmi\jdk\jre\lib\security\cacerts" -storepass changeit

   In Linux

   /opt/jp1dh/aje/ajee/csmi/jdk/jre/bin/keytool -import -alias [The alias of server certificate]^#1 -file [The path name of the server certificate file] -keystore /opt/jp1dh/aje/ajee/csmi/jdk/jre/lib/security/cacerts -storepass changeit

   #1

   Specify any name of server certificate to the alias of server certificate.

   In Linux, appoint the keytool in full path.

   For example: The value of CmdJreHome is "/opt/server.cer":

   $ cd /opt/jp1dh/aje/ajee/csmi/jdk/jre/bin $ /opt/jp1dh/aje/ajee/csmi/jdk/jre/bin/keytool -import -alias test1 -file /opt/server.cer -keystore /opt/jp1dh/aje/ajee/csmi/jdk/jre/lib/security/cacerts -storepass changeit

10. The keytool command asks you "Trust this certificate? [no]". Enter "yes" and press return.

11. Registration is completed.

    Note: When you carry out the overwrite installation or update installation of this program, the registered server certificate is deleted. Therefore, when you carry out the overwrite installation or update installation of this program, carry out the registration of the server certificate. When you do not register the server certificate, the DH custom job finishes an error.

To Page Top