<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title>Answers to: How to change the certificate for SSL/HTTPS?</title><link>https://answers.axonivy.com/questions/392/how-to-change-the-certificate-for-ssl-https</link><description>&lt;p&gt;We use SSL/HTTPS to access the Ivy server. We want to exchange the certificate with our own. How can we do this? &lt;/p&gt;</description><atom:link href="https://answers.axonivy.com/questions/392/how-to-change-the-certificate-for-ssl-https" rel="self"></atom:link><language>en</language><lastBuildDate>Mon, 18 Aug 2014 11:39:57 -0400</lastBuildDate><item><title>Answer by Christian Strebel</title><link>https://answers.axonivy.com/questions/392/how-to-change-the-certificate-for-ssl-https/920</link><description>&lt;p&gt;Another easy way is to use the &lt;a href="http://xpertivy.ch/releases/Xpert.ivy/latest/documents/ServerGuideHtml/ivy.server.integration.html"&gt;Webserver Integration&lt;/a&gt; with an IIS or Apache in front of the Ivy server. Then the SSL/HTTPS configuration can be made in the &lt;a href="http://www.iis.net/learn/manage/configuring-security/how-to-set-up-ssl-on-iis"&gt;IIS&lt;/a&gt; or &lt;a href="http://httpd.apache.org/docs/2.4/ssl/"&gt;Apache&lt;/a&gt; webserver. Normally the IT of the customer knows how to do that.&lt;/p&gt;</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Christian Strebel</dc:creator><pubDate>Mon, 18 Aug 2014 11:39:57 -0400</pubDate><guid>https://answers.axonivy.com/questions/392/how-to-change-the-certificate-for-ssl-https/920</guid></item><item><title>Answer by Flavio Sadeghi</title><link>https://answers.axonivy.com/questions/392/how-to-change-the-certificate-for-ssl-https/393</link><description>&lt;p&gt;You can find the keystore for SSL in this file on the server: &lt;/p&gt;
&lt;p&gt;&lt;code&gt;[Ivy-Server]/configuration/keystore.jks&lt;/code&gt;&lt;/p&gt;
&lt;p&gt;You can either add your certificate or create a new keystore. For information about how to manipulate a keystore for Java, please use the &lt;a href="http://docs.oracle.com/javase/7/docs/technotes/tools/windows/keytool.html"&gt;keytool&lt;/a&gt; from Oracle. &lt;/p&gt;
&lt;p&gt;Do not forget to adapt the settings for SSL and HTTPS. Open the System Administration tool from Ivy and go to the System Properties. You will have to change especially the password in the property &lt;code&gt;WebServer.HTTPS.KeystorePass&lt;/code&gt; (default is changeit).&lt;/p&gt;
&lt;p&gt;&lt;img alt="alt text" src="/upfiles/Unbenanntes_Bild.png"&gt;&lt;/p&gt;
&lt;p&gt;If you have more than one certificates in your keystore you need to fill in the KeyAlias to specify which one should be used. If the field is empty, the first certificate in the keystore will be used.&lt;/p&gt;</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Flavio Sadeghi</dc:creator><pubDate>Mon, 07 Mar 2011 09:14:33 -0500</pubDate><guid>https://answers.axonivy.com/questions/392/how-to-change-the-certificate-for-ssl-https/393</guid></item></channel></rss>