Create:AM 9.3 user_keystore and user_keystore_config

[Vinay_9681]

Hello-

I am hoping to see if anyone can help me in creating the keystore & keystore config files.

I ran the following in the command prompt:

CMD> keytool -keygen -alias alias_name -keyalg RSA -keystore user_keystore

1. Should the keystore name start like .user_keystore or just keystore 
2. Where or how can I create the user_keystore_config file ? Is this just the notepad in Windows like the password that was enter in keygen step ?
4.  

[Lian Way Foon]

unfortunately no .... I am facing the same problem. I raised support ticket but they told me to pay for a service from HCL company.

[Vinay_9681]

Thank You. All the org changes with support is not helping us either to get this install going forward.

Also we only tried work-around 2 from this to no effect:

https://knowledge.broadcom.com/external/article?articleId=124912

[Stefano De Leo]

We use a signed certificate and steps once we got the certificate were as follow

 

keytool -import -v -noprompt -trustcacerts -alias user_keystore -file your_certificate.cer -keystore user_keystore -storepass your_password

 

#list content of keystore

keytool -list -v -keystore user_keystore -storepass your_password

 

echo "your_password" > user_keystore_config

chmod 600 user_keystore_config

chmod 600 user_keystore

cp -p user_keystore $AW_HOME/data

cp -p user_keystore_config $AW_HOME/data

 

cd $AW_HOME/web/classes

java -DAW_HOME=${AW_HOME} -cp AppWorx.jar:uc4-ra.jar com.appworx.util.EncryptKeystoreFile your_password

 

# check that password got encrypted

cat AW_HOME/data/user_keystore_config

 

[Vinay_9681]

Thanks this looks promising. Also answers that the config file is clear text password. I  understand you did this in *Nix OS, but do you know if the file extension in Windows should be JKS or txt or create the file with no extension ?

[Stefano De Leo]

Not sure if Windows requirements are any different.  Also just to clarify, the following command encrypts the password eventually:

 

java -DAW_HOME=${AW_HOME} -cp AppWorx.jar:uc4-ra.jar com.appworx.util.EncryptKeystoreFile your_password

 

 

 

 

[Vinay_9681]

Yes I understood the encryption part. 

I started this with genkeypair that generates the keys but maybe I should start by creating the certificate first and then the other steps. 

I am unsure how Windows handles the environment variable so $DAW_HOME or $AW_HOME and in Linux it's easy to set these and run the command and when i tried explicitly it came back with an error about not finding the file for the encryption command from web/classes path.