• Keytool Commands
• Generate A Private Key Using Keytool

Self signed keystore can be easily created with keytool command. But if you have a private key and a CA signed certificate of it, You can not create a key store with just one keytool command. You need to go through following to get it done. Create PKCS 12 file using your private key and CA signed certificate of it. You can use openssl. To Use keytool to Create a Server Certificate. Run keytool to generate a new key pair in the default development keystore file, keystore.jks. This example uses the alias server-alias to generate a new public/private key pair and wrap the public key into a self-signed certificate inside keystore.jks. Jul 01, 2019  How to query and verify your keystores with the keytool command. Create private key and keystore. To get started, the first thing we need to do is create a private key keystore. This is going to be a file on your filesystem, and I'm going to name mine privateKey.store. To create this “private key keystore,” run the following keytool command.

Certificate Signing Request (CSR) Help
Using Java Keytool
For Oracle Weblogic
There is a video for this solution.
Complete the following steps to create your CSR.
1. Generate rsa key pair algorithm. Generate public key from pfx file in windows. Before you can create your CSR, you need to create your Java keystore. Your Java keystore contains your private key.
Run the following command to create your 2048 bit Java keystore:
keytool -genkey -alias myalias -keyalg RSA –keysize 2048 -keystore c:yoursite.keystore
2. Note the alias you use here to create the keystore. You will need to use the same alias later when you install your certificate.
Please note: the below example applies to Entrust Certificate Services customers with the intended purpose of using an SSL/TLS certificate purchased from Entrust Datacard.
3. You will be prompted to enter your DN information for your CSR. When it asks for your first and last name, make sure you enter the FQDN of your site. Here is an example:
What is your first and last name?
[Unknown]: http://www.entrust.com/
What is the name of your organizational unit?
[Unknown]: IT
What is the name of your organization?
[Unknown]: Entrust Inc
What is the name of your City or Locality?
[Unknown]: Ottawa
What is the name of your State or Province?
[Unknown]: Ontario
What is the two-letter country code for this unit?
[Unknown]: CA
Is CN=www.entrust.com, OU=IT, O=Entrust Inc, L=Ottawa, ST=Ontario, C=CA correct?

Keytool Commands

[no]: yes
4. To create your CSR, run the following command:
keytool -certreq -keyalg RSA -alias myalias -file certreq.txt -keystore c:yoursite.mykeystore
5. To find your CSR, enter the command:
type certreq.txt
Your SSL/TLS Certificate should now be installed. If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance.
Hours of Operation:
Sunday 8:00 PM ET to Friday 8:00 PM ET
North America (toll free): 1-866-267-9297
Outside North America: 1-613-270-2680 (or see the list below)
NOTE: It is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra '1' before the '800' or your call will not be accepted as an UITF toll free call.

Generate A Private Key Using Keytool