Hitachi

JP1 Version 12 JP1/Navigation Platform Setup and Operations Guide


5.15.1 Procedure for registering or updating a CA certificate in the keystore

The following describes the procedure for registering a CA certificate in the keystore for the first time or updating the CA certificate registered in the keystore.

Important

Note the following points when performing the procedure to register or update CA certificates in the keystore:

  • Back up the keystore file ("%UCNP_HOME%\PP\uCPSB\jdk\lib\security\cacerts"), if necessary.

  • We recommend that you record the keystore password, which might be used in subsequent operations.

  • If the message "Enter the keystore password" appears during the following procedure, enter the keystore password.

  1. If necessary, change the keystore password.

    Execute the following command to change the password:

    "%UCNP_HOME%\PP\uCPSB\jdk\bin\keytool" -storepasswd -cacerts

    The following messages appear.

    Display

    Enter the keystore password:
    New keystore password:
    Enter the new keystore password again:

    For the keystore password, enter the password that was set before the change. The initial value is changeit.

    For New keystore password, enter the password you want to use.

    Hereafter, the password entered for New keystore password will be used as the keystore password.

  2. Checking the entry registered in the keystore

    Execute the following command to check the entry registered in the keystore:

    "%UCNP_HOME%\PP\uCPSB\jdk\bin\keytool" -list -v -cacerts

    If "alias: cakey" appears, a CA certificate with the same alias name has already been registered. To delete the registered information, go to "3. Deleting the CA certificate registered in the keystore".

    If "Keystore contains no entry" appears, a CA certificate has not been registered yet. Go to "4. Importing a new CA certificate".

  3. Deleting the CA certificate registered in the keystore

    Execute the following command to delete the registered CA certificate from the keystore:

    "%UCNP_HOME%\PP\uCPSB\jdk\bin\keytool" -delete -alias cakey -cacerts
  4. Importing a new CA certificate

    Execute the following command to register the CA certificate in the keystore:

    "%UCNP_HOME%\PP\uCPSB\jdk\bin\keytool" -noprompt -importcert -alias cakey -file CA-certificate-file-path -trustcacerts -cacerts