Creating your own keystore

This procedure describes how to create your own keystore for Control-M MFT and Control-M MFT B2B Gateway.

To create your own keystore:

1. Run the keytool for Control-M MFT and Control-M MFT B2B Gateway in the following locations:
   • MFT: <Agent Home>/cm/AFT/JRE_LINK/bin
   • MFT B2B Gateway: <Gateway Home>/mft-proxy/JRE/bin
2. Do one of the following:
   • Generate a new keystore in PKCS#12 format by doing the following:
     1. Run the following:

        keytool -genkeypair -v -alias <my_alias> -keystore <keystorePath> -storetype PKCS12 -keypass <keystore_password> -storepass <keystore_password> -keyalg RSA -keysize 2048

     2. Create a certificate signing request from a CA and then import the certificate reply from a CA to the keystore.
   • Generate a new keystore in PKCS#12 format and bring your own key-pair into the keystore by doing the following:
     1. Empty the keystore from public/private key-pair entry, as follows:

        keytool -delete -alias <my_alias> -keystore <keystorePath> -storetype PKCS12 -storepass <keystore_password>

     2. Ensure that the keystore is empty by running the following:

        keytool -v -list --keystore <keystorePath> -storetype PKCS12 -storepass <keystore_password>

     3. Import the public/private key-pair stored in <file_location>.p12 (pfx) file into the keystore by running the folllowing:

        keytool -v -importkeystore -srckeystore <whateverthefileis.p12> -srcstoretype PKCS12 - srcstorepass <whateverthefileis_password> -destkeystore <keystorePath> -deststoretype PKCS12 -deststorepass <keystore_password>

   • Convert an existing keystore in JKS/PKCS12 format to the PKCS#12 format.

   EXAMPLE: keytool -v -importkeystore -srckeystore <srckeystorePath> -srcstoretype PKCS12 - srcstorepass <srcKeystorePassword> -destkeystore <destkeystorePath> -deststoretype PKCS12 -deststorepass <destKeystorePassword>

   For more specific information, see Keytool Documentation.