Generate a keystore to store the certificates used by Database Security server.
You can generate a new keystore using the keytool executables. After installing the Database Security server, you can find the keytool executable at:
For Database Security server -
<Server install root>\McAfee\Trellix Database Security\java\zulu8.70.0.23-ca-jre8.0.372-win\bin\keytool.exe
Example: C:\Program Files\McAfee\Trellix Database Security\java\zulu8.70.0.23-ca-jre8.0.372-win\bin\keytool.exe
For more information about the keytool utility, see: Keytool.
Note
Database Security server only supports Keystore’s of JKS type.
Generate a new keystore containing a new key:
<keytool dir>/keytool -genkey -alias tomcat -keystore newkeystore -keyalg RSA -keysize 2048Type the keystore password:
changeitFor first and last name, type the host name of the computer where the Database Security server is installed.
Type the organization information.
Type the city and province information in the respective prompt.
Type
yesto confirm the information.A new file with the name newkeystore is created.
The following is an example of the output (with sample input) to generate a new keystore:
C:\Program Files\McAfee\Trellix Database Security\zulu8.70.0.23-ca-jre8.0.372-win\bin>keytool -genkey -alias tomcat -keystore newkeystore -keyalg RSA -keysize 2048
Enter keystore password:
Re-enter new password:
What is your first and last name?
[Unknown]: Dan deMan
What is the name of your organizational unit?
[Unknown]: mycompany.com
What is the name of your organization?
[Unknown]: Mycompany
What is the name of your City or Locality?
[Unknown]: Santa Clara
What is the name of your State or Province?
[Unknown]: CA
What is the two-letter country code for this unit?
[Unknown]: US
Is CN=Dan deMan, OU=mycompany.com, O=Mycompany, L=Santa Clara, ST=CA, C=US correct?
[no]: yes