Knowledge Base

Installing your SSL Certificates in a Java Web Server

If you have not yet created a Certificate Signing Request (CSR) and ordered your certificate, see
CSR Creation: Java Keytool SSL Certificates or try our Java Keytool CSR Wizard Java Keytool CSR Creation.

Installing the certificate in your Java Keystore

1. Download your SSL Certificate bundle file (your_domain_name.p7b) from your DigiCert Account to the same folder where your keystore is (your_site_name.jks if you used our keytool CSR command generator). The one .p7b file contains all of the necessary certificates for your keystore.

   Note: The certificate must be installed in the same keystore that was used to generate your CSR. You will get an error if you try to install it to a different keystore.

2. Type the following command to install the certificate file:

   keytool -import -trustcacerts -alias server -file your_domain_name.p7b -keystore your_site_name.jks

   If the certificate is installed correctly, you will receive a message stating "Certificate reply was installed in keystore."

   If it asks if you want to trust the certificate. Choose y or yes.

   Your keystore file (your_site_name.jks) is now ready to use on your server. Just configure your server to use it.