Creating Jks Files Using The Java Keytool - Cisco AJ732A - MDS 9134 Fabric Switch Configuration Manual

Creating JKS Files Using the Java Keytool

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
An optional company name []:
Set the duration the certificate will be valid. Keep track of this date.
Step 10
OpenSSL> x509 -req -days 365 -in server.csr -CA rt.cert -CAkey rt.key -CAcreateserial -out
server.cert
Loading 'screen' into random state - done
Signature ok
subject=/C=AU/ST=wi/L=town/O=cisco/OU=tac/CN=bill/emailAddress=bill@cisco.com
Getting CA Private Key
Step 11 Create the pkcs12 certificate for serverpub.
OpenSSL> pkcs12 -export -in server.cert -inkey server.key -nokeys -out serverpub.p12
Loading 'screen' into random state - done
Enter Export Password:
Verifying - Enter Export Password:
Create the pkcs12 certificate again for the server.
Step 12
OpenSSL> pkcs12 -export -in server.cert -inkey server.key -out server.p12
Loading 'screen' into random state - done
Enter Export Password:
Verifying - Enter Export Password:
OpenSSL>
Creating JKS Files Using the Java Keytool
To create the JKS files needed by the Fabric Manager server using the JAVA Keytool, do the following:
Copy client.p12 and serverpub.p12 that are found in the OpenSSL /bin directory to the Fabric Manager
Step 1
Server Java directory tool directory C:\Program Files\Java\jre1.5.0_11\bin.
Step 2 From a DOS window in the Java /bin directory, create the JKS files needed by the Cisco SME KMC.
Import client PKCS12 keystore to JKS
keytool -importkeystore -srckeystore client.p12 -srcstoretype PKCS12 -destkeystore
sme_rkm_client.jks -deststoretype JKS
Import server PKCS12 keystore to JKS
keytool -importkeystore -srckeystore serverpub.p12 -srcstoretype PKCS12 -destkeystore
sme_rkm_trust.jks -deststoretype JKS
Place these keystore files in the mds9000/conf/cert directory and restart Fabric Manager server.
Cisco MDS 9000 Family Storage Media Encryption Configuration Guide
D-4
Appendix D RSA Key Manager and Cisco SME
OL-18091-01, Cisco MDS NX-OS Release 4.x