HTTPS Certificate Installation

If you want to secure any VoiceConsole and/or VoiceCheck communications, you need to obtain and install one or more HTTPS certificates. The following steps can assist you with those tasks.

Creating a Certificate Signing Request

To create a certificate, you must first create a certificate signing request.

  1. Copy and paste the following command into a terminal session on the machine where the Java keytool is located. The command assumes that the Java keytool is installed on the server. Replace the variables that appear in bold with the applicable information.

    keytool -genkey -alias tomcat -keyalg RSA -keysize 2048 -keystore <keystorePath>/.keystore -dname "CN=<Domain name of server>, O=<Your Organization>, OU=<Organizational Unit>, L=<City>, ST=<State>, C=<Country>"

    If you are running this command on Windows, paste it into the command prompt and ensure the JDK bin folder is in the PATH environment.

  2. Press Enter.
  3. Enter a keystore password.
  4. Press Enter.
  5. Copy and paste the following command, replacing the bold variables with the appropriate information.

    keytool -certreq -alias tomcat -file <csrPath>/<csrFileName>.csr -keystore <keystorePath>/.keystore

  6. Verify keystore password.
  7. Press Enter and complete the creation.

The Java keytool utility creates the private key and certificate signing request as <keystorePath>/ .keystore and <csrPath>/<csrFileName>.csr.

Getting a Certificate from a Certificate Authority

  1. Send the files created by the Java keytool to a certificate signing authority. See Supported Authorities.
  2. Purchase a certificate.

Installing the Certificate

From a Certificate Authority

  1. Place the certificate file you received from a certificate authority into the directory where the private key and certificate signing request were saved.
  2. Run the following command, replacing the bold variables with the applicable information. Keytool -import -trustcacerts -alias tomcat -file <certificateFileName>.p7b -keystore <keystorePath>/.keystore
  3. A confirmation of installation appears.

Updating a Certificate

If you need to renew or change a certificate, request the new certificate with the same alias and for the same server name. You only need to reinstall the certificate. No additional steps are necessary.