Import a CA certificate to Trellix ePO - On-prem

Prev Next

You must install the relevant certificate authority (CA) certificates on Trellix ePO - On-prem to enable HTTPS support for WebDAV.

  1. The CA certificate must be imported to the Trellix ePO - On-prem keystore from C:\Program Files (x86)\McAfee\ePolicyOrchestrator\JRE\lib\security\cacerts

  2. Using the command prompt, run the following command to import the certificate to the Trellix ePO - On-prem keystore: keytool -importcert -alias <ca-cert-name> -file <ca-cert-file-location> -keystore "C:\Program Files (x86)\McAfee\ePolicy Orchestrator\JRE\lib\security\cacerts" -storepass <password>.

    Note

    The ca-cert-name, password, and ca-cert-file-location can all relate to the customer's specific details.

Trellix DLP is now secure by importing the trusted certificate authority (CA) certificates.

Note

The keystore can be upgraded or replaced during an Trellix ePO - On-prem upgrade, and we recommend that you check the certificates are still present in the keystore. To check that the certificates are present in the keystore, go to DLP Settings > Shared Storage and perform Test Connection. If the test fails after the Trellix ePO - On-prem upgrade, run this command to import the certificate to the keystore: keytool -importcert -alias <ca-cert-name> -file <ca-cert-file-location> -keystore "C:\Program Files (x86)\McAfee\ePolicy Orchestrator\JRE\lib\security\cacerts" -storepass <password>.

Note

The ca-cert-name, password, and ca-cert-file-location can all relate to the customer's specific details.