New RAS

[Devildiablo]

Forgive me all if this is a stupid question....

So a while ago in our Dev environment I had to re-install a RAS server. As part of this I wasnt providing a certificate and had to import the one created during the installation to the central server using the keytool.

We are now adding an additional RAS and I tried to repeat the process using the cert created installing the new RAS but im getting the error "Certificate not imported alias <myalias> already exits.

Obviously im doing something stupid or missing something obvious. I wasnt involved in the original build of our infrastructure and documentation on this isnt very helpful.

Any ideas or suggestions?

[RustedSpork · Accepted solution]

Does the java keystore you're importing into contain a certificate with the same serial as the one you're adding?:

You can check using

...keytool -list -v -keystore "...client.truststore" -storepass <changeit>

e.g.

C:\Program Files\Hewlett Packard Enterprise\HPE Operations Orchestration\java\bin\keytool -list -v -keystore c:\Program Files\Hewlett Packard Enterprise\HPE Operations Orchestration\ras\var\security\client.truststore -storepass changeit

If the certificate is not already in there, can you import it using a different alias?

e.g.

"C:\Program Files\Hewlett Packard Enterprise\HPE Operations Orchestration\java\bin\keytool" -importcert -alias DevildiabloNewCert -keystore c:\Program Files\Hewlett Packard Enterprise\HPE Operations Orchestration\ras\var\security\client.truststore -file MyCert.cer -storepass changeit

[Devildiablo]

As you described I had to add a new alias.

The previous time I hadnt specified an alias so it must use a default alias name.

As I was trying to use the same command from the last time it was trying to use the same defauly alias name.

Thank you!!