Import certificates into Codar's truststore

Prior to running the upgrade installer, you should have exported the SSL certificate from the truststore for Codar. Import this certificate and other application's certificates into the truststore for the new version.

To import the certificates into Codar's truststore, complete the following steps:

1. If you did not export the SSL certificate from the truststore of Codar version 1.50 or 1.60, the truststore has been backed up to the CSA_HOME\_Codar_1_70_0_installation\Backup\security\keystores\ directory. Follow the instructions in Initial setup to export the Codar SSL certificate from the backed up truststore (you will need to modify the location of the truststore in the command).

2. Import the Codar certificate into the new Codar truststore. Complete the following steps:

   1. Run the following command:

      CSA_HOME\openjre\bin\keytool -importcert -keystore
CSA_HOME\openjre\lib\security\cacerts -alias <alias> -file <file_name> -storepass <password>

      <alias> is the name used by the Codar server keystore to identify the SSL certificate.

      <file_name> is the filename given to the certificate file to be imported.

      <password> is the password you create. Be sure to store it in a secure location that you can access.

      For example, run the following command where the alias used to identify the certificate is codar, and the file the certificate is named codar.cert and is saved in the current directory:

      CSA_HOME\openjre\bin\keytool -importcert -keystore
CSA_HOME\openjre\lib\security\cacerts -alias
codar -file .\codar.cert -storepass <your-password>

   2. At the prompt to import the certificate, type yes.

3. Import the Operations Orchestration certificate into the new Codar truststore. Complete the following steps:

   1. If the root certificate of the Operations Orchestration Certificate Authority is stored in a file on this system, import that file. Otherwise, export the Operations Orchestration certificate from Operations Orchestration's truststore:

      1. On the system running Operations Orchestration, open a command prompt and change the directory to ICONCLUDE_HOME.

      2. Run the following command:

         Windows

         \java\bin\keytool ‑exportcert ‑alias pas ‑file C:\oo.cer ‑keystore .\Central\conf\rc_keystore ‑storepass bran507025

         Linux

         /java/bin/keytool ‑exportcert ‑alias pas ‑file /tmp/oo.cer ‑keystore ./Central/conf/rc_keystore ‑storepass bran507025

         Note C:\oo.cer and /tmp/oo.cer are examples of file names and locations used to store the exported root certificate.

      3. If Operations Orchestration is not running on the same system as Codar, copy oo.cer from the Operations Orchestration system to the system running Codar

   2. On the system running Codar, run the following command:

      Windows

      CSA_HOME\openjre\bin\keytool -importcert -alias pas -file
C:\oo.cer -keystore CSA_HOME\openjre\lib\security\cacerts -storepass <password>

      Linux

      CSA_HOME\openjre/bin/keytool ‑importcert ‑alias pas ‑file /tmp/oo.cer ‑keystore
CSA_HOME\openjre/lib/security/cacerts ‑storepass <password>

      <password> is the password you create. Be sure to store it in a secure location that you can access.

   3. When prompted to trust the certificate, type yes.

4. If other applications, such as the database, LDAP, SMTP, Operations Orchestration Load Balancer, or Continuous Delivery Automation require SSL, you must import these applications' certificates into the truststore of Codar version 1.80.