Frequently Asked Questions
How to import a certificate for Agfa EI report retrieval
Last Updated 4 years ago
For report retrieval to be possible over HTTPS, the certificate of the report server must be imported into the (embedded) JRE Keystore.
Required steps:
- Open a web browser and retrieve a report using the Agfa URL
- Select the security icon (usuall lock icon) and open the certificate
- Export the certificate to a file as DER encoded binary (X509) and store it to a local folder (e.g. 'D:\certificate.cer')
- Locate the keystore's location in the (embedded) JRE
Typically this is 'C:\Program Files (x86)\Perennity iMAGE Portal\Embedded\jre.8.0.45\lib\security\cacerts'
- The keytool that is used to access the keystore is typically installed with the JRE (e.g. C:\Program Files (x86)\Perennity iMAGE Portal\Embedded\jre.8.0.45\bin) and ready to use. Run the standard keytool to import the certificate:
keytool.exe -import -alias site_alias -keystore "C:\Program Files (x86)\Perennity iMAGE Portal\Embedded\jre.8.0.45\lib\security\cacerts" -file D:\certificate.cer
where site_alias is an alias for the certificate and certificate.cer is the certificate that was exported from a browser earlier.
- When promted 'Enter keystore password:', enter "changeit". By default keystores have a password of "changeit".
-When prompted 'Trust this certificate? [no]:', enter "yes". This imports the certificate into the keystore and displays the message: "Certificate was added to keystore".
References:
https://www.ibm.com/docs/en/tnpm/1.4.2?topic=security-import-certificate-jre-keystore
Required steps:
- Open a web browser and retrieve a report using the Agfa URL
- Select the security icon (usuall lock icon) and open the certificate
- Export the certificate to a file as DER encoded binary (X509) and store it to a local folder (e.g. 'D:\certificate.cer')
- Locate the keystore's location in the (embedded) JRE
Typically this is 'C:\Program Files (x86)\Perennity iMAGE Portal\Embedded\jre.8.0.45\lib\security\cacerts'
- The keytool that is used to access the keystore is typically installed with the JRE (e.g. C:\Program Files (x86)\Perennity iMAGE Portal\Embedded\jre.8.0.45\bin) and ready to use. Run the standard keytool to import the certificate:
keytool.exe -import -alias site_alias -keystore "C:\Program Files (x86)\Perennity iMAGE Portal\Embedded\jre.8.0.45\lib\security\cacerts" -file D:\certificate.cer
where site_alias is an alias for the certificate and certificate.cer is the certificate that was exported from a browser earlier.
- When promted 'Enter keystore password:', enter "changeit". By default keystores have a password of "changeit".
-When prompted 'Trust this certificate? [no]:', enter "yes". This imports the certificate into the keystore and displays the message: "Certificate was added to keystore".
References:
https://www.ibm.com/docs/en/tnpm/1.4.2?topic=security-import-certificate-jre-keystore