Linux: Generate the keystore file for M&R

This site will be decommissioned on December 31st 2024. After that date content will be available at techdocs.broadcom.com.

Create the keystore file for the M&R host. This file stores the Tomcat server's private key and self-signed certificate.

Prerequisites

Stop the M&R Tomcat service. For example, opt/APG/bin/manage-modules.sh service stop tomcat

Procedure

♦ Generate the keystore. For example, run this command for the M&R host if it has a Fully Qualified Domain Name (FQDN):
```
/opt/APG/Java/Sun-JRE/8.0.281/bin/keytool -genkey -alias tomcat
-keyalg RSA -ext san=dns:localhost,dns:<M&R frontend FQDN>,ip:127.0.0.1 -keystore /opt/APG/.keystore
```
1. Enter changeit for the keystore password.
2. When asked for your first and last name, enter the fully qualified name of the machine, for example, itops-dev-204.lss.emc.com.
3. Answer the other questions and type yes when asked for confirmation.
If you are using an IP address naming convention for the configuration, run this command and specify the IP address of the M&R host for < ip:x.x.x.x>.
```
/opt/APG/Java/Sun-JRE/8.0.281/bin/keytool -genkey -alias tomcat 
-keyalg RSA -ext SAN=dns:localhost,ip:x.x.x.x,ip:127.0.0.1 -keystore /opt/APG/Web-Servers/Tomcat/Default/conf/.keystore
```

Results

This creates a keystore file inside /opt/APG folder with name .keystore. This is a hidden file in Linux.