Generating a Test Certificate

A keystore containing a public key/private key pair and an expiring, self-signed certificate for testing SSL is shipped with FlexNet Manager for Engineering Applications. If the shipped keystore has expired, you can generate another test keystore using keytool, a command-line utility provided in the Java JDK. Use the following instructions to generate a simple key pair and certificate keystore that is valid for three months. This keystore enables you to test that the SSL listener can run, but its certificate is also self-signed, and is not trusted by the browser.

To generate a test certificate using the keytool utility:

1.

Install or locate a Java JDK. Verify that the keytool utility is accessible at the command line.

2.

Generate a simple key pair and non-trusted certificate into a keystore file in the current directory named keystore by typing the following:

keytool -keystore keystore -alias tomcat -genkey -keyalg RSA

You will be prompted to provide answers to several questions for the certificate. Press the Enter key to submit each of your answers. Note the password that you enter. In the next section, Configuring FlexNet Manager for Engineering Applications with the Test Certificate, you will enter these passwords into the FlexNet Manager for Engineering Applications Configurator. If you answer these questions accurately for the test certificate, the certificate that you generate can be used as the basis of your trusted certificate that you obtain from a certificate authority.

Certificate Questions

Question	Description
Enter keystore password	Password for the keystore. The default SSL keystore password for FlexNet Manager for Engineering Applications is flexnet. The password is displayed in plain text.
What is your first and last name?	Fully qualified domain name of the machine on which FlexNet Manager for Engineering Applications is installed.
What is the name of your organizational unit?	Name of your division or group in your company.
What is the name of your organization?	Your company name.
What is the name of your City or Locality?	City name.
What is the name of your State or Province?	State or province name.
What is the two-letter country code for this unit?	Two-letter code for your country.
Is entry correct?	Verify that the entries you provided are correct. Type yes or no.
Enter key password for <tomcat> (RETURN if same as keystore password):	Press Enter to use the same password for the Tomcat SSL key as the keystore uses. You must use the same password.