JSS web interface

[jarednichols]

Is there any way to use a different certificate for the JSS web interface? I've got a certificate signed by our CA on the OS X Server box hosting the JSS, but I don't know how to apply it to JSS's web instance.

Thanks!

j
--
Jared Nichols
ISD Infrastructure and Operations - Desktop Engineering
MIT Lincoln Laboratory
244 Wood St.
Lexington, MA 02420-9108
(781) 981-5500

[#2]

Yes, it can be done.

You need to create a new keystore file. The current keystore file is
called .keystore in /Library/Tomcat. I used openssl to create a new
keystore file from my existing .crt file.

You also have to edit server.xml to include your keystore password and
type. Our cert was thru Go Daddy so I used some instructions they had for
Tomcat.

Chad

[John_Wetter]

The instructions are all in the JAMF kb website:

http://www.jamfsoftware.com/kb/article.php?id=019

I did this last week and it worked great. The only thing I had to modify was to add in an intermediate certificate, but it all went smoothly.

-John

[jafuller]

Any additional information you can provide? The KBase article is rough at best. We have root, intermediate and server certs. I'd like to use these for SSL with Tomcat but haven't been able to get them packaged up properly.

Thanks!