Changing a certificate

Use this procedure to change a certificate, for example, when you need to change your temporary certificate after you receive a new certificate.

  1. Log on to the LifeCycle Manager Server as Windows administrator.
  2. Open a command prompt.
  3. Go to the JSSE directory in the LifeCycle Manager Server installation path.
  4. Run this command to import the root certificate of the Certificate Authority into the keystore:

    keytool -import -alias ca -file cert_file -keystore servercert.new

    The cert_file is a certificate file (DER or Base-64 encoded) containing the root certificate of your Certificate Authority.

  5. Run this command to import the certificate chain that you received from the Certificate Authority into the keystore:

    keytool -import -alias server -file p7b_file -keystore servercert.new

    The p7b_file is a PKCS #7 file that you should have received from your Certificate Authority. This file contains the issued certificate for the LifeCycle Manager Server and all issuer certificates in the chain up to the root certificate of the Certificate Authority.

  6. Stop the LifeCycle Manager Server Windows service LCM-Server.
  7. Replace the servercert file with the servercert.new file.
  8. Restart the LifeCycle Manager Server Windows service LCM-Server.