This CMU function lets you import an existing certificate and private key pair into a new keystore. The certificate and private key pair, in this instance, may have been provided by a third party certificate authority or agency. CMU takes the pair, stores them in a newly-created keystore, and creates the corresponding Tomcat configuration file named server.xml. It is important to note that the CMU only accepts X509 Distinguished Name-based certificates encoded in ASN.1 DER binary or PEM (Base64 encoding) formats and unencrypted, RSA private keys in PKCS#8 PrivateKeyInfo format.
The CMU will NOT accept formats not specified.
To begin the import process, perform the procedure below:
From the top menu of the CMU main screen, select Action>Create Keystore>Import Certificate and Private Key.
Specify the location of the X509 certificate file to be imported.
Note: The CMU only accepts X509 Distinguished Name-based certificates encoded in ASN.1 DER binary or PEM (Base64 encoding) format.
Specify the location of the unencrypted, RSA private key to be imported. Make sure that it is in a PKCS#8 PrivateKey Info format. If you have a private key in Base64 encoding, you need to convert it to binary encoding.
Provide and confirm the password for the new Keystore. Note that the password must be at least six characters long.
Click Import.
Note: You can select Settings>Keystore Information to see the default directory CMU places a keystore in.