tzFjqED8

1Jetty/Certificate setup.
2
3Use following command for import
4
5keytool -import -keystore c:\Godiva\gdi\pos\res\ssl\.truststore -file xcenter-20140311.cer -alias xcentre-localhost
6
7=========================================================================================================================
8
9Perform the following procedure to create and deploy Self-Signed Certificates for Xcenter and
10Xadmin.
111. To create a directory structure for key creation, type the following commands:
12C:\>md C:\cert\xstore
13C:\>cd C:\cert\xstore
14To create a Keystore and Key, type the following command:
15C:\cert\xstore>keytool -genkey -keystore server.keystore -alias
16xcenter-YYYYMMDD -keyalg RSA -keysize 2048 -validity 3950
17a. When prompted, enter and confirm the keystore password.
18This password will need to be configured in Jetty/Tomcat. The
19password will also need to be entered and confirmed in later sections.
20When prompted for a key password, press [Enter] to use the same
21password as the keystore. MICROS recommends using the same
22password for both the keystore password and the key password.
23
24b. Answer the questions when prompted. (NOTE: The questions may appear in a
25different order than shown in the table below. Answer each question appropriately
26using the table below as a guide).
27
28Name Field Explanation Example
29First and Last Name (aka Common Name) : The hostname or IP address that will be used to access the server.: 10.0.1.1
30Organizational Unit  : Use this field to remind you what the certificate is used for.    :  Xstore-YYYYMMDD
31The OU must be different on each key. (One option is to add
32a date to make it unique).
33Organization Name  : The exact legal name of your organization.  :  Micros Retail
34City or Locality  : The city where your organization is located.  :  Cleveland
35State or Province Name  : The state or province where your organization is located.  :  Ohio
36Cannot be abbreviated.
37Two-letter country code  : The two-letter ISO abbreviation for your country  :  US
38
39c. When prompted if the information is correct, type y or yes.
40d. When prompted, press [Enter] to use the same password as the keystore.
41[RECOMMENDED]
42
433. To self-sign the Certificate, type the following command:
44C:\cert\xstore>keytool -selfcert -alias xcenter-YYYYMMDD -keystore
45server.keystore -validity 395
46
47a. When prompted, enter the keystore password.
48
494. To export the Certificate, type the following command:
50C:\cert\xstore>keytool -export -alias xcenter-YYYYMMDD -keystore
51server.keystore -rfc -file xcenter-YYYYMMDD.cer
52
53a. When prompted, enter the keystore password.
54
555. The resulting server.keystore will be used during the Jetty/Tomcat install. See
56“Installing an App Server: Jetty or Tomcat” on page 58 for installation instructions.
57
58Now reinsatll Jetty and use this keystore and cert for the installation.
59
60Once Done,
61Import the cert that was exported in step 4 above to the following locations:
62pos/res/ssl/.truststore (if exists)
63gdi_pos/res/ssl/.truststore (if exists)
64%JAVA_HOME%/jre/lib/security/cacert (the cacert you added torun configurations on your system for email to work)
65Command to import:
66keytool -import -keystore (name of the keystore/truststore/cacert) -file (the ecrt exported in step 4)
67enter the keystore password.
68Password for xstore .trustore file will be allgoodthings
69Password for java cacert will be changeit
70
71Once you do this,
72Access the webservice using your computer name not localhost. and it should work.