How to convert existing foundry onprem tomcat .jks https cert to pkcs12?

HCL Volt MX Volt MX Tips
,
1

Currently voltmx foundry onprem installation uses .jks cert for https configuration. (‘.pfx’, ‘.p12’) is now the preferred format because it’s widely supported across platforms, including Java, OpenSSL, Windows, and Linux.

To convert existing .jks https cert to .p12 format, below are the steps

  1. Stop the foundry instance

  2. convert existing jks cert to p12 by running following command. Before running command java version should be same as what foundry supports. Check java version by running “java -v”

    keytool -importkeystore -srckeystore <source_keystore.jks> -srcstoretype JKS -destkeystore <destination.p12> -deststoretype PKCS12

  3. Goto foundry tomcat/conf/server.xml and change the two things keystoreFile=“<path to .p12 file>” keystoreType=“PKCS12”.

  4. Restart the foundry server

1 Like