Documentation

Sometimes customers employ a certificate for Fylr which uses a company specific root authority which is unknown to the JDK which makes AWP fail to connect to such a Fylr instance. Follow these steps to import the Fylr certificate into the JDK keystore.

1. Copy the jdk\lib\security\cacerts file into a working folder
2. Copy the certificate pem file into that working folder
3. Remove everything in front of the —–BEGIN CERTIFICATE—– block in the pem file
4. Open a administrative shell and navigate to the working folder
5. Make sure the JDK keytool is available (On Windows you might want to run set PATH=%PATH%;“c:\Program Files\Fylr\services\jdk\bin”)
6. Import the certificate:
   keytool -import -v -trustcacerts -alias serveralias -file ./certificate.pem -keystore ./cacerts (Password: changeit)
7. Copy the updated cacerts file back to the original location (you might want to rename the original version first)