Cep Terminals GSM/GPRS TERMINAL CT63 JAVA 6203 User Manual

11.5 Create a Java Security Environment Step by Step



wm_java_usersguide_v19

Page 97 of 109

2012-01-27

Confidential / Released

The key store contains the key pairs for signing data. For producing the key store with keys the 
tool “keytool.exe” can be used. The program is in the Java SDK. (for a description see 

Example:

If you want to re-use the key store created in 

 you have to use the alias and pass-

words used there. 

For exporting the x.509 root certificate use “keytool.exe”. The program is in the Java SDK. (for 
description see 

For producing the java security commands the tool “jseccmd.jar” can be used. This program is 
in the folder “wkt\bin”.

Command for inserting the Customer Root Certificate

- In consequence of the command

Java security mode: ON (untrusted domain OFF)
HTTPS certificate verification: OFF
MES state: ON

Command for removing the Customer Root Certificate

- In consequence of the command all switches are reset

Java security mode: OFF (untrusted domain OFF)
HTTPS certificate verification: OFF
MES state: ON

keytool -genkey -alias keyname -keypass keypassword -keystore customer.ks 
            -storepass keystorepassword -sigalg SHA1withRSA -keyalg RSA

keytool -export -v -keystore customer.ks -storepass keystorepassword 
            -alias keyname > certificate.der

java -jar jseccmd.jar -cmd SetRootCert 
                              -certfile certificate.der
                              -imei 012345678901234 -alias keyname
                              -storepass keystorepassword -keypass keypassword
                              -keystore customer.ks > SetRootCert.bin

java -jar jseccmd.jar  -cmd DelRootCert
                               -imei 012345678901234 -alias keyname
                               -storepass keystorepassword -keypass keypassword
                               -keystore customer.ks > DelRootCert.bin