Convert PFX certificate to JKS keystore using KeyStore Explorer

Convert PFX certificate to JKS keystore using KeyStore Explorer

Issue:

Can we import the wildcard SSL Certificate we already have on our IIS server(s)?


Solution:

Please see the following documentation on how to convert a PFX certificate, exported from an IIS server, to a Java JKS keystore.



Once you have your new Java keystore file, copy the new keystore file into the /stoneware/config directory.
To find the exact keystore filename that your relays are configured to look for, look at your relay objects in the webAdmin Dashboard and check the CERTIFICATE SOURCE field.

Restart the webNetwork service on the server to active the new SSL Certificate:
  1. Browse to the 8090 Management Console of the server (https://127.0.0.1:8090).
  2. Select the Settings tab, and click the Shutdown button to shut down the webNetwork service cleanly.
  3. Start the webNetwork service back up.
    Windows Command Prompt: net start webnetwork
    Linux Terminal Prompt: /etc/init.d/webNetworkctl start
Do this on all Unified Workspace servers.

It is best to shut down and try the new keystore on one server prior to copying it to all other servers.


*Make sure when exporting the PFX certificate, from IIS, you choose the option to export the entire certificate chain (root>intermediate>server).

If you do not, you will need to follow the following article to make sure your keystore has the proper certificate chain.

Keywords: Cert, PFX, KeyStore Explorer, SSL

    • Related Articles

    • Our SSL cert is expiring on our UW servers, can Lenovo Software help us renew that certificate?

      Issue SSL Certificate is expiring/expired on customer's Unified Workspace (formerly webNetwork) server(s). Solution Lenovo Software Support can assist you with renewing the SSL Certificate on your UW servers.  The only downtime required will be a ...
    • Convert JKS keystore to PFX Certificate using KeyStore Explorer

      Issue: Can we export the wildcard SSL Certificate from the Unified Workspace Java keystore for use on our IIS server(s)? Solution: Please see the following documentation on how to convert your UW Java keystore to a PFX Certificate that can be ...
    • SSL certificate installation - part 1

      Problem:  Need to create and add new wildcard SSL certificate to Unified Workspace server. Prerequisite(s): Download and install KeyStore Explorer tool on workstation Solution(s):  Below instructions will walk you through process of creating a new ...
    • SSL Root Certificate causing issues with Slingshot

      Issue: When trying to run a Slingshot webApp on a workstation, the Slingshot utility gives the following error: Error: "Problem found with the Secure Sockets Layer(SSL) certificate sent by the server.  Please note that self-signed certificates cannot ...
    • How do I renew my SSL certificate?

      This process is in 3 basic parts.  1 - Create the Keystore  2 - Generate the CSR  3 - Import the cert  The documentation below has several methods to complete this process. The first is a how to use a free Java gui tool called Portecle, the second is ...
    • Popular Articles

    • Old Browser Versions

      Question: I am using an older browser version and am having problems. What can be done ? We are not able to upgrade the browser at this time.   This is a challenge for any company that makes software that utilizes a browser. Since Stoneware does not ...
    • LCS Redirection

      Problem: How to redirect the LCS in an environment with multiple LCSs and students connecting to them. Solution(s): Create an allow.cfg on all LCS(s) (including the Master) in the network, however, even if no allow.cfg is present on an LCS, machines ...
    • Time windows allows for Service Shutdown

      Issue: Can the time windows gives a service to shut down before it kills the service be increased? Solution: Yes, the following information comes from the Microsoft URL : http://support.microsoft.com/kb/146092 To specify the wait time, do the ...
    • How to disable password saving - Internet Explorer

      Having multiple methods for saving a password in the browser can cause confusion for the user.   To disable password saving in Internet Explorer, launch Internet Explorer and perform the following steps. Click the blue Settings menu icon in the upper ...
    • How to disable password saving - Chrome

      Having multiple methods for saving a password in the browser can cause confusion for the user.  To disable password saving in Chrome, launch Chrome and perform the following steps. Click the Chrome menu button in the upper right corner of the Chrome ...
    • Recent Articles

    • Lenovo Unified Workspace 7.0.0.63 Released

      Highlights of Unified Workspace 7.0.0.63 Before you install: Please view the installation notes here. 7.0.0.63 Requires new 7.0 license file. Below is a list of enhancements and fixes for Unified Workspace 7.0.0.63 New Profile Style New Login ...
    • How to fix customized login and profile after upgrading to v7.0

      With the release of 7.0 the default login page has been modified to simplify the customization process.  If you are having an issue with the login page not displaying, after upgrading to v7.0, you will need to delete the custom CSS code and start ...
    • SAML SP - Sync Directory Password

      Login script to prompt for directory password Since the user does not login into Unified Workspace with a password, we cannot capture the password to use in the @@password@@ variable.  If you would like to use the Active Directory password for other ...
    • MySQL 8 SSL

      Issue Admin is making a database connection to a MySQL 8 database.  When clicking the Ping button on the DB Connection object, the following error is presented: WARN: Establishing SSL connection without server's identity verification is not ...
    • 7.0 excludeProtocols - includeProtocols - allowCiphers - denyCiphers config file

      excludeProtocols - includeProtocols - allowCiphers - denyCiphers config file The following configuration is recommended for systems running 7.0.0.63, and higher. (For older 6.5 releases of UW, please see this article.) ...