Procedure 8
Installing the Root and signed certificates
Step
1
2
3
4
5
6
7
Importing a preinstalled CA root or intermediate certificate
You must know the absolute path to import a preinstalled CA root certificate
into the keystore. Enter one of the following commands:
/usr/java/jdk1.5.0_03/bin/keytool -import -trust-
cacerts -keystore .keystore -alias root -file
<absolute_path_root_certificate_file>
Copyright © 2007, Nortel Networks
.
Action
At the MCG 3100 Server, log on to the server as nortel.
Change to the certificate keystore directory:
cd /opt/SQMobilityGW
If the CA requires a root certificate, import it (in TXT format):
/usr/java/jdk1.5.0_03/bin/keytool -import
-trustcacerts -keystore .keystore -alias root
-file <absolute_path_root_certificate_file>
If the CA requires an intermediate certificate, import it (in TXT
format):
/usr/java/jdk1.5.0_03/bin/keytool -import -trust-
cacerts -keystore .keystore -alias intermediate
-file <absolute_path_intermediate_cert_file>
Import the signed TLS certificate:
/usr/java/jdk1.5.0_03/bin/keytool -import
-trustcacerts -keystore .keystore -alias tomcat
-file <absolute_path_signed_certificate_file>
Nortel strongly recommends that you back up the keystore directory to
protect the files against overwriting, deletion, or corruption.
Restart the server:
/sbin/service mobilitygw restart
Enter the root password.
Nortel Mobile Communication 3100 Series Portfolio
Nortel Mobile Communication Gateway 3100 Installation
NN42030-300 01.03 Standard
Release 2.0 30 October 2007
Manage TLS certificates 39
ATTENTION
—End—