Siemens XT65 用户手册

12.5 Create a Java Security Environment Step by Step

s

wm_java_usersguide_v12

Page 110 of 123

2008-02-25

Confidential / Released

The key store contains the key pairs for signing data. For producing the key store with keys the
tool “keytool.exe” can be used. The program is in the Java SDK. (for a description see 

Example:

If you want to re-use the key store created in 

 you have to use the alias and pass-

words used there. 

For exporting the x.509 root certificate use “keytool.exe”. The program is in the Java SDK. (for
description see 

For producing the java security commands the tool “jseccmd.jar” can be used. This program is
in the folder “wkt\bin”.

Command for inserting the Customer Root Certificate

- In consequence of the command

Java security mode: ON (untrusted domain OFF)
HTTPS certificate verification: OFF
MES state: ON

Command for removing the Customer Root Certificate

- In consequence of the command all switches are reset

Java security mode: OFF (untrusted domain OFF)
HTTPS certificate verification: OFF
MES state: ON

keytool -genkey -alias keyname -keypass keypassword -keystore customer.ks 

            -storepass keystorepassword -sigalg SHA1withRSA -keyalg RSA

keytool -export -v -keystore customer.ks -storepass keystorepassword 

            -alias keyname > certificate.der

java -jar jseccmd.jar -cmd SetRootCert 

                              -certfile certificate.der

                              -imei 012345678901234 -alias keyname

                              -storepass keystorepassword -keypass keypassword

                              -keystore customer.ks > SetRootCert.bin

java -jar jseccmd.jar  -cmd DelRootCert

                               -imei 012345678901234 -alias keyname

                               -storepass keystorepassword -keypass keypassword

                               -keystore customer.ks > DelRootCert.bin