Creating a new certificate

This procedure describes how to create a new certificate.

To create a new certificate:

1. Stop the Control-M Web Services API service or process, as described in Stopping Control-M Web Services API.
2. Do one of the following:
   • Windows: Open a command prompt
   • UNIX: Open a UNIX session under the agent ID where Control-M Web Services API is installed.
3. Execute the following commands:

   >keytool -certreq -file certReqFile

4. Send the certReqFile to the third party for signing.
5. Once the certificate is signed, execute the following commands:
   • >keytool -delete -alias <ctm.bpi.ifc.ws.sslServerAlias property value> -keystore server.keystore -storepass <ctm.bpi.ifc.ws.sslServerPassword property value>
   • >keytool -import -alias <ctm.bpi.ifc.ws.sslServerAlias property value> -keystore server.keystore -storepass <ctm.bpi.ifc.ws.sslServerPassword property value> -file <signed certificate file>
6. Update your account utility as described in Updating the Control-M Web Services API account utility.
7. Update your web service client as described in Updating the web service client.
8. Restart the Control-M Web Services API service or process.