Blue Ribbon Toll Free: (800) 892-7095

GeoTrust SSL Certificates

at Wholesale Prices in about 10 Minutes*

Customer Login
Home > Support > Installation > Tomcat

Install SSL Certificate: Tomcat

Follow these instructions to install your GeoTrust SSL certificate for your Web site.

Import and Install the GeoTrust Root CA Certificate

  1. First, copy the GeoTrust CA root certificate to a file on your local or network file system as geotrustroot.crt. The GeoTrust CA root certificate is available from your SSL Manager account. Login at https://secure.geocerts.com and click the My Certs tab. Then click the order ID number of the certificate to bring up a detail page. Highlight, copy, and paste the green text below "CA Root Certificate".
  2. Using the java keytool command line utility, import the geotrustroot.crt CA certificate using the following command: keytool -import -alias geotrustca -keystore /working/mykeystore -file geotrustroot.crt The command should be typed on one line. This command imports the CA root certificate into the keystore named mykeystore in the working directory (assuming it already exists). Your keystore path and name may be different.

Import and Install the SSL Server Certificate

  1. Save the SSL server certificate anywhere on your local or network file system as yourdomain.crt. The SSL server certificate is the block of text included in the body of the fulfillment email sent to you when your order completed. It is also available from your SSL Manager account. Login at https://secure.geocerts.com and click the My Certs tab. Then click the order ID number of the certificate to bring up a detail page. Highlight, copy, and paste the green text below "Server Certificate".
  2. Using the java keytool command line utility, import the yourdomain.crt certificate using the following command: keytool -import -alias tomcat -keystore /working/mykeystore -file yourdomain.crt The command should be typed on one line. This command imports the certificate into the keystore named mykeystore in the working directory. Your keystore path and name may be different.

Update Your Tomcat server.xml Configuration File:

  1. Open $JAKARTA_HOME/conf/server.xml in a text editor.
  2. Find the following section: <Connector className="org.apache.catalina.connector.http.HttpConnector"
    port="8443" minProcessors="5" maxProcessors="75"
    enableLookups="true"
    acceptCount="10" debug="0" scheme="https" secure="true">
    <Factory className="org.apache.catalina.net.SSLServerSocketFactory"
    clientAuth="false" protocol="TLS"
    keystoreFile="/working/mykeystore"
    keystorePass="password"/>
  3. If you want Tomcat to use the default SSL port, change all instances of the port number 8443 to 443.
  4. Edit the keystoreFile and keystorePass directives to correspond with the keystore file and password that you are using.
  5. Start or restart Tomcat using the appropriate startup script (startup.sh for unix/linux or startup.bat for windows).