Install Sun Java™ Code Signing Certificate to Keystore

Solution ID:    SO1079
Version:    20.0
Published:    12/13/2007
Updated:    11/13/2014

Solution

Step 1:  Download Sun Java Code Signing Certificate

Perform the following steps to download the Sun Java Code Signing certificate:

  1. Login to the appropriate account:
    Thawte Certificate Center (TCC)
    Thawte Certificate Center Enterprise (TCCE)

  2. Select the certificate from the list
     
  3. Down below under the Status tab and under Available Actions, click the Pick up certificate link
     
  4. Copy and paste the encoded text in it's PKCS#7 format to a text editor document (ex. Notepad, Vi) and save with a .p7b extension
     

Step 2:  Install a PKCS#7 Formatted Sun Java Code Signing Certificate

Perform the following step to install the PKCS#7 formatted Sun Java Code Signing certificate:

NOTE:  The certificate issued by Thawte can only be installed back to the original Keystore and original Alias that was used to generate the CSR request file

Install the certificate using the following command:

keytool -import -trustcacerts -alias YourAliasName -keystore YourKeystoreName -file certificate.p7b


NOTE:  Replace YourAliasName and YourKeystoreName with the Alias and Keystore names that were used when generating the CSR.  Also replace FileName2BSigned with the file name that will be signed.
 

 Step 3:  Verify Properly Installed Sun Java Code Signing Certificate to Keystore

Perform the following step to verify that the Sun Java Code Signing certifricate was properly installed to the Keystore:

To verify the certificate was properly installed to the Keystore, use the following command:

keytool -list -v -keystore YourKeystoreName


From the output, verify that the KeyEntry: PrivateKeyEntry has a chain of 3 or 4 certificates.  For example:

Certificate[1]:
Certificate[2]:
Certificate[3]:
Certificate[4]:

Related Information and Resources:

If the followin error occurs during installation: "java.lang.Exception: Input not an X.509 certificate"
See Solution ID:  SO7108

For instructions to sign code:
See Solution ID:  SO7517

 

Legacy ID

vs17991

Knowledge Center


Search Tips