Adding a root CA certificate in the Java truststore

Some MVE LDAP configurations use a load balancer or a virtual IP (VIP) to redirect LDAPS requests. In these cases, the root CA certificate of the domain must be installed and trusted in the MVE Java truststore.

1. Import the root CA certificate, and then confirm that the certificate is trusted.

2. Back up your database and application files.

3. Stop the MVE service.

4. Run the command prompt as an administrator, and then type the following:

   "C:\Program Files\Lexmark\Markvision Enterprise\jre\bin\keytool.exe" -import -trustcacerts -alias EnterpriseRootCA -file C:\temp\EnterpriseRootCA.cer -keystore "C:\Program Files\Lexmark\Markvision Enterprise\jre\lib\security\cacerts"

5. When prompted to enter the keystore password, type changeit.

6. When prompted whether to trust the certificate, type yes.

   Notes:

   • If the process is successful, then a Certificate was added to keystore message appears.
   • If the file-level permissions for the cacerts file do not allow you to update the file, then an access-denied message appears. You can either update the permissions for the file or run the command prompt as an administrator who has the permission to update the file.

7. Restart the MVE service.