How to Install Entrust SSL certificate

Steps to Install Entrust SSL Certificate on Tomcat Server

Initial Instruction

Before Installing SSL Certificate please ensure following processes have been completed.

  • Buy/renew Entrust SSL Certificate
  • Generate CSR with SHA-2 algorithm
  • Save the CSR & Private key file on your server
  • Apply for SSL Certificate Issuance
  • Submit SSL issuance Documents required by Entrust (If required)
  • First install L1C Chain Certificate, then Root certiicate and finally install server certificate.

Step 1: Store Entrust SSL Certificate Files

Once you complete the payment process, entrust will provide you SSL certificate in a zip file via email. Download that zip file and extract it on your server directory where you want to store all your SSL Certificate files.

Step 2: Install Entrust L1C Chain Certificate 

  • Open the Entrust L1C chain certificate file using any text editor, copy all encrypted content and paste it in to a text file. Now save this new file with L1Cchain.cer filename.
  • Enter following piece of code using keytool Utility.
Keytool -import -alias <alias> -Keystore <your_keystore_filename> -trustcacerts -file <filename_of_the_chain>

For Example

C:\>keytool -import -alias EntrustL1C -Keystore c:\.mykeystore -trustcacerts -file c:\L1Cchain.cer

  • Enter the Keystore password
  • If it asks for “Trust this certificate? [no]:” type Y.
  • Entrust L1C chain certificate is now added on your server.

Step 3: Install Entrust Root Certificate

  • Open the Entrust Root certificate file using any text editor, copy all encrypted content and paste it in to a text file. Now save this new file with Root.cer filename.
  • Enter following piece of code using keytool Utility.
keytool -import -alias <alias> -keystore <your_keystore_filename> -trustcacerts -file <filename_of_the_root>

For Example

C:\>keytool -import -alias Root -keystore c:\.mykeystore -trustcacerts -file c:\root.cer

  • Enter the Keystore password
  • Root certificate is now installed on your Server.

Step 4: Install Entrust Server Certificate

  • Open the Entrust Server certificate file using any text editor, copy all encrypted content and paste it in to a text file. Now save this new file with Server.cer file name.
  • Enter following piece of code using keytool Utility.
keytool -import -alias <alias> -keystore <your_keystore_filename> -trustcacerts -file <filename_of_the_chain>

For Example

C:\>keytool -import -alias myalias -keystore c:\.mykeystore -trustcacerts -file c:\server.cer

  • Enter the Keystore password
  • Server certificate is now installed on your Server

Resources and Other Installation Guides