After updating the Java Runtime Environment on your Remote Management server, you must update the Java key store certificates. This process requires admin rights on the server.

  1. On the server, navigate to C:\Program Files\Java\jre1.8.0_65\lib\security and back up the cacerts file.
  2. Copy the cacerts file and paste it into C:\Program Files\Java\jre1.8.0_65\bin.
  3. Open an administrative command prompt.
  4. Enter SET PATH=%TS_JAVA_HOME%\bin;%PATH.
  5. Change the directory to %TS_JAVA_HOME%\bin.
  6. Add the root cert to the cacerts file using the following command and substitute the bold values with your values.

    keytool -import -alias [unique-alias] -file [certfilepath] -keystore cacerts -storepass

    Changeit (all lowercase) is the default password for java cert store provided it remains unchanged.

  7. Restart the Remote Management Service.

For example, if you want to add a root certificate that was exported to airwatchroot.cer, use the following command.

keytool -importcert -file C:/Users/User/Desktop/awrootca.cer -alias CA_ALIAS -keystore