Move keystore files to your installation - Move keystore files to your installation - Alfresco - Alfresco Content Services - Alfresco/Alfresco-Content-Services/23.4/Alfresco-Content-Services/Install/Install-with-zip/Install-on-Tomcat/Move-keystore-files-to-your-installation - 23.4 - 23.4

Alfresco Content Services
Platform
Alfresco
Product
Alfresco Content Services
Release
23.4
License
ft:lastPublication
2026-04-22T22:35:19.567073
ft:locale
en-US

The new keystore configuration implementation requires it to be configured with Alfresco Keystore configuration.

  1. Move the default keystore files to your installation
    1. Extract from the alfresco-content-services-distribution-x.x.x.zip file, where x.x.x is the version number, the following two files:
      • /keystore/metadata-keystore/keystore
      • /keystore/metadata-keystore/keystore-passwords.properties
    2. Copy them to your installation at the following location:
      • <TOMCAT_HOME>/alf_data/keystore/metadata-keystore/keystore
      • <TOMCAT_HOME>/alf_data/keystore/metadata-keystore/keystore-passwords.properties
  2. Configure Tomcat 10 to use the default keystore files
    1. Open <TOMCAT_HOME>/bin/catalina.bat in a text editor.
    2. Add the following line to catalina.bat: 
      set “JAVA_TOOL_OPTIONS=-Dencryption.keystore.type=JCEKS -Dencryption.cipherAlgorithm=DESede/CBC/PKCS5Padding -Dencryption.keyAlgorithm=DESede -Dencryption.keystore.location=<TOMCAT_HOME>/alf_data/keystore/metadata-keystore/keystore -Dmetadata-keystore.password=mp6yc0UD9e -Dmetadata-keystore.aliases=metadata -Dmetadata-keystore.metadata.password=oKIWzVdEdA -Dmetadata-keystore.metadata.algorithm=DESede”

      Make sure to replace <TOMCAT_HOME> with your Tomcat installation directory.