How to Install Entrust SSL certificate

Steps to Install Entrust SSL Certificate on Tomcat Server

Initial Instruction

Before Installing SSL Certificate please ensure following processes have been completed.

Buy/renew Entrust SSL Certificate
Generate CSR with SHA-2 algorithm
Save the CSR & Private key file on your server
Apply for SSL Certificate Issuance
Submit SSL issuance Documents required by Entrust (If required)
First install L1C Chain Certificate, then Root certiicate and finally install server certificate.

Step 1: Store Entrust SSL Certificate Files

Once you complete the payment process, entrust will provide you SSL certificate in a zip file via email. Download that zip file and extract it on your server directory where you want to store all your SSL Certificate files.

Step 2: Install Entrust L1C Chain Certificate

Open the Entrust L1C chain certificate file using any text editor, copy all encrypted content and paste it in to a text file. Now save this new file with L1Cchain.cer filename.
Enter following piece of code using keytool Utility.

Keytool -import -alias <alias> -Keystore <your_keystore_filename> -trustcacerts -file <filename_of_the_chain>

For Example

C:\>keytool -import -alias EntrustL1C -Keystore c:\.mykeystore -trustcacerts -file c:\L1Cchain.cer

Enter the Keystore password
If it asks for “Trust this certificate? [no]:” type Y.
Entrust L1C chain certificate is now added on your server.

Step 3: Install Entrust Root Certificate

Open the Entrust Root certificate file using any text editor, copy all encrypted content and paste it in to a text file. Now save this new file with Root.cer filename.
Enter following piece of code using keytool Utility.

keytool -import -alias <alias> -keystore <your_keystore_filename> -trustcacerts -file <filename_of_the_root>

For Example

C:\>keytool -import -alias Root -keystore c:\.mykeystore -trustcacerts -file c:\root.cer

Enter the Keystore password
Root certificate is now installed on your Server.

Step 4: Install Entrust Server Certificate

Open the Entrust Server certificate file using any text editor, copy all encrypted content and paste it in to a text file. Now save this new file with Server.cer file name.
Enter following piece of code using keytool Utility.