On the menu, open Tools > Change KeyStore Type and select BCFKS.Open Keystore Explorer and use File > Open to navigate to D:\v100\config\templates\tomcat and open the server.keystore file.To convert the Tomcat keystore, server.keystore:
#KEYSTORE EXPLORER TOOL INSTALL#
Using the open source tool called KeyStore Explorer to convert from JKS to BCFKS format.ĭownload and install KeyStore Explorer on the eDiscovery primary server following the defaults.
#KEYSTORE EXPLORER TOOL PASSWORD#
If you have used another password, please replace both password values with the new password. Note: The above command assumes the current cacerts password is changeit. Keytool -importkeystore -srckeystore cacerts -srcstoretype JKS -srcstorepass changeit -destkeystore cacerts.bcfks -deststorepass changeit -deststoretype BCFKS -providerclass .provider.CryptoComplyFipsProvider
When convenient, run Option #7 in the Clearwell Utility on the server desktop to deploy the converted certificate.ī.Upon completion of the conversion, rename the server.keystore to then rename the converted keystore from to server.keystore.If you have used another password, please replace both password values with the new password.Īlso, if copying/pasting this command, ensure that no extra characters are randomly inserted into the command. Note: The above command assumes the current keystore password is 123456.
Keytool -importkeystore -srckeystore server.keystore -srcstoretype JKS -srcstorepass 123456 -destkeystore -deststorepass 123456 -deststoretype BCFKS -providerclass .provider.CryptoComplyFipsProvider
Using the Java Keytool command to convert JKS to BCFKS format A. The Veritas eDiscovery version 10.0 System Administration Guide provides a command line to convert a JKS formatted keystore to the BCFKS format. On occasion, it may be necessary to manually convert a JKS formatted keystore to BCFKS format, such as when implementing secure LDAP (LDAPs).
#KEYSTORE EXPLORER TOOL UPGRADE#
The new format used in version 10.0 and above is Bouncy Castle Foundation KeyStore format (BCFKS) and is required for both the server.keystore and cacerts files.ĭuring an upgrade or fresh installation, this conversion takes place automatically. Prior to version 10.0 the Tomcat keystore, server.keystore, and the Java Certificate Autority keystore, cacerts, used by eDiscovery were in Java KeyStore format (JKS). In eDiscovery version 10.0, a new keystore format was introduced to improve security and compatibility with modern encryption methods.
0 kommentar(er)
