{"id":984,"date":"2018-02-26T11:16:28","date_gmt":"2018-02-26T11:16:28","guid":{"rendered":"https:\/\/www.sslrenewals.com\/blog\/?p=984"},"modified":"2021-11-25T08:34:16","modified_gmt":"2021-11-25T08:34:16","slug":"how-to-install-ssl-certificate-on-apache-tomcat-server","status":"publish","type":"post","link":"https:\/\/sslrenewals.com\/blog\/how-to-install-ssl-certificate-on-apache-tomcat-server","title":{"rendered":"How to Install an SSL Certificate on Apache Tomcat Server"},"content":{"rendered":"

Here are step-by-step instructions to\u00a0Install SSL Certificate on Apache Tomcat server<\/h2>\n

\"install<\/p>\n

Released 19 years ago, Apache Tomcat server is one of the most popular choices when it comes to open-source servers. Among all Java application servers, Tomcat occupies a staggering 63.9% of the market share. But we\u2019re not here to sing the praises of Tomcat, are we? So, let\u2019s get to the SSL certificate<\/a> installation process in Tomcat without wasting much time.<\/p>\n

\n

Get SSL for your Apache Tomcat server and save up to 71%<\/h2>\n

Authenticate your Tomcat server using a reliable SSL certificate and set up a secure communication channel.<\/p>\n

Protect Apache Tomcat server with an SSL certificate today!<\/a><\/p>\n<\/div>\n

Before you begin\u2026<\/h3>\n

You must make sure that the certificate files that you received from your certificate provider are stored in the same server directory as the keystore you created at the time of CSR generation<\/a>.<\/p>\n

If you\u2019ve taken care of this requirement, you\u2019re good to go.<\/p>\n

Here\u2019s how to install SSL in Tomcat<\/h3>\n

Step 1: Root Certificate Installation<\/h4>\n

First and foremost, you\u2019ll need to install your root certificate file on your server. You\u2019ll need to install the following command to do it:<\/p>\n

keytool -import -trustcacerts -alias root -file RootCertFileName.crt -keystore keystore.key<\/em><\/strong><\/p>\n

Now, you\u2019ll receive a message that says \u201cCertificate already exists in system-wide CA keystore under alias <…> Do you still want to add it to your own keystore? [no]:\u201d. Choose Yes. If the installation was successful, a “Certificate was added to keystore” message will be displayed on your screen.<\/p>\n

Step 2: Intermediate Certificate Installation<\/h4>\n

Depending on your CA, you may or may not need to do this step. That\u2019s because not every CA provides an intermediate certificate. You only need to install an intermediate certificate if you have received one. Run the following command to do so:<\/p>\n

keytool -import -trustcacerts -alias intermediate -file IntermediateCertFileName.crt -keystore keystore.key<\/em><\/strong><\/p>\n

A “Certificate was added to keystore” message will be displayed if this went well.<\/p>\n

Step 3: Primary Certificate Installation<\/h4>\n

Type in the following command to install the primary certificate:<\/p>\n

keytool -import -trustcacerts -alias tomcat -file PrimaryCertFileName.crt -keystore keystore.key<\/strong><\/em><\/p>\n

Once done successfully, you should see a “Certificate reply was installed in keystore” message on your screen.<\/p>\n

Step 4: SSL Connector Configuration<\/h4>\n

Once all these steps are done successfully, you\u2019ll need to configure your SSL connector. Without this, an SSL\/TLS connection cannot be established. So, keep a close eye on this part.<\/p>\n

The things you\u2019ll need to do are to change the file location and password.<\/p>\n