Install an Oracle Java certificate

1. Go on your certificate status page (a link is provided in the delivery e-mail)
2. Click on the "Download the certificate" button and save the file in binary PKCS7 format (p7-0000000000-0000.p7b) on your server.
3. Log on the machine and in the same directory from which you created the certificate request
4. Import the certificate:

keytool -import -alias [alias-name] -file [p7-0000000000-0000.p7b] -keystore [storagename]

You must use the same alias name and the same keystore name you provided in your certificate request.
A "-trustcacerts" parameter exist and is sometimes recommended for the import. It is important to note that adding it will add the root certificate to the keystore. This can cause issues with certification chains.

Common errors

• java.lang.exception: input not an x.509 certificate

Useful command

See and check the content of the keystore:

keytool -list -v -keystore  your_keystore_filename > Keystore_content1.txt

Useful links

• Use a Oracle Java Code Signing certificate
• Otain a code signing certificate
• Create a #PKCS12 (.pfx / .p12) from a Java Keystore

External documentation

• Keytool: http://java.sun.com/j2se/1.5.0/docs/tooldocs/solaris/keytool.html