- Download certificate from server which is used to configure SSL in tomcat (If certificate has a password then get the password for the root certificate from your certificate provider).
-
Execute command given below to generate the PKCS12 format (.p12) which needs to be imported into client personal certificates:
1. During the course of the process, you will be prompted to provide the root certificate password (only for the first time). Please provide the root certificate password. 2. Secondly, you will be prompted to provide a password forkeytool -importkeystore -srckeystore {path_to_JKS_cert} -destkeystore {desired_path_for .p12} -srcstoretype JKS -deststoretype PKCS12 -deststorepass {your_password}.p12 certificate(that is being generated). Provide a desired password as per your password policy. 3. Certificate will be generated and saved to the location of your choice. Keep the newly generated .p12 certificate handy for next steps.