How to Create Keystore and Truststore Files for Secure Communication in the Informatica Domain

How to Create Keystore and Truststore Files for Secure Communication in the Informatica Domain

Step 3. Create Truststore Files

Step 3. Create Truststore Files

Create truststores in PEM and JKS formats with a CRT file and keytool. The truststore files must contain the root, intermediate, and end user SSL certificates.
  1. Create a truststore in PEM format.
    Run the following command:
    $ cat <CRT file> >> <PEM truststore>
    For example, the following command uses a CRT file named keystore.crt to create a truststore in PEM format named infa_truststore.pem:
    $ cat keystore.crt >> infa_truststore.pem
    The truststore in PEM format must be named "infa_truststore.pem" and is case sensitive.
  2. Create a truststore in JKS format.
    Run the following command:
    $ keytool -importcert -file <PEM truststore> -keystore <JKS truststore> -alias "<alias>" storetype JKS -v -trustcacerts
    For example, the following command uses a PEM truststore named infa_truststore.pem to create a truststore in JKS format named infa_truststore.jks with the alias informatica:
    $ keytool -importcert -file infa_truststore.pem -keystore infa_truststore.jks -alias "informatica" storetype JKS -v -trustcacerts
    The truststore in JKS format must be named "infa_truststore.jks" and is case sensitive.

0 COMMENTS

We’d like to hear from you!