Generate A New Certificate And A New Certificate Signing Request; Generate Certificate Signing Request (Csr) From The Existing Keystore; Import The Signed Certificate Into The Keystore; Import New Pkcs12 Certificate Into The Keystore - Novell ZENWORKS LINUX MANAGEMENT 7.3 IR2 - INSTALLATION GUIDE 07-20-2009 Installation Manual

Section A.7.3, "Import the Signed Certificate into the Keystore," on page 128
Section A.7.4, "Import New PKCS12 Certificate into the Keystore," on page 128
Section A.7.5, "Import a CA Certificate into the Keystore," on page 128
Section A.7.6, "Exit," on page 128
A.7.1 Generate a New Certificate and a New Certificate Signing
Request
Use this option to generate a new SSL certificate and a Certificate Signing Request (CSR) for it.
Provide the required details, such as the name of the organization, the state, and the first two letters
of the country name to generate the certificate. The hostname of the server for which the certificate
is generated is CN.
A new certificate is created with the specified details and the CSR is stored in the specified path.
A.7.2 Generate Certificate Signing Request (CSR) from the
Existing Keystore
Use this option to generate the Certificate Signing Request (CSR) from the existing Tomcat
certificate. You must specify the absolute file path to store the CSR. The default path is
. You must use this CSR to get the certificate signed by a trusted Certificate Authority. For
cert.csr
more information, see
A.7.3 Import the Signed Certificate into the Keystore
After you use the CSR to have your certificate signed, use this option to import the certificate into
the keystore. You must specify the absolute file path to store the certificate.
A.7.4 Import New PKCS12 Certificate into the Keystore
Use this option to import a third-party signed certificate into the Tomcat certificate store. If your
certificate is not a PKCS12 certificate, you must first convert the certificate into PKCS12 format,
and then use this option to import it. For more information on converting the certificate to PKCS12
format, see
A.7.5 Import a CA Certificate into the Keystore
Use this option to import the CA certificates into the keystore. You must import the chain of CAs to
successfully add the CA certificate in to the certificate store.

A.7.6 Exit

Use this option to exit the menu options.
128 Novell ZENworks 7.3 Linux Management Installation Guide
Section A.7.3, "Import the Signed Certificate into the Keystore," on page 128
Section A.8, "Converting a Signed Certificate into PKCS12 Format," on page
/tmp/zlm-
129.