Import a CA certificate to ePO - On-prem

Prev Next

You must install the relevant certificate authority (CA) certificates on ePO - On-prem to enable HTTPS support for WebDAV.

  1. The CA certificate must be imported to the ePO - On-prem keystore from C:\Program Files (x86)\McAfee\ePolicyOrchestrator\JRE\lib\security\cacerts

  2. Using the command prompt, run the following command to import the certificate to the ePO - On-prem keystore: keytool -importcert -alias <ca-cert-name> -file <ca-cert-file-location> -keystore "C:\Program Files (x86)\McAfee\ePolicy Orchestrator\JRE\lib\security\cacerts" -storepass <password>.

    Note

    The ca-cert-name, password, and ca-cert-file-location can all relate to the customer's specific details.

Trellix DLP is now secure by importing the trusted certificate authority (CA) certificates.

Note

The keystore can be upgraded or replaced during an ePO - On-prem upgrade, and we recommend that you check the certificates are still present in the keystore. To check that the certificates are present in the keystore, go to DLP Settings > Shared Storage and perform Test Connection. If the test fails after the ePO - On-prem upgrade, run this command to import the certificate to the keystore: keytool -importcert -alias <ca-cert-name> -file <ca-cert-file-location> -keystore "C:\Program Files (x86)\McAfee\ePolicy Orchestrator\JRE\lib\security\cacerts" -storepass <password>.

Note

The ca-cert-name, password, and ca-cert-file-location can all relate to the customer's specific details.