===== Customer Certificates =====

==== Introduction ====

Sometimes customers employ a certificate for Fylr which uses a company specific root authority which is unknown to the JDK which makes AWP fail to connect to such a Fylr instance. Follow these steps to import the Fylr certificate into the JDK keystore.

==== Solution ====

  - Copy the ''jdk\lib\security\cacerts'' file into a working folder
  - Copy the certificate pem file into that working folder
  - Remove everything in front of the ''-----BEGIN CERTIFICATE-----'' block in the pem file
  - Open a administrative shell and navigate to the working folder
  - Make sure the JDK keytool is available (On Windows you might want to run ''set PATH=%PATH%;"c:\Program Files\Fylr\services\jdk\bin"'')
  - Import the certificate: \\ ''keytool -import -v -trustcacerts -alias serveralias -file ./certificate.pem -keystore ./cacerts'' (Password: ''changeit'')
  - Copy the updated cacerts file back to the original location (you might want to rename the original version first)