Changes between Version 11 and Version 12 of IdpKeyRollOver

Timestamp:

09/28/11 09:38:48 (13 years ago)

Author:

jpmitchell@…

Comment:

--

IdpKeyRollOver

@@ -197 +197 @@
 }}}
 
-10. Create a new Java Key Store for Tomcat containing the new key/cert for securing the back channel. You will need the !ImportKey Java utility for importing a pre-existing cert/key into a Java Key Store. You can get it from: [[ImportKeyUtil|Import Key Utility]].
+10. Create a new Java Key Store for Tomcat containing the new key/cert for securing the back channel. You will need the !ImportKey Java utility for importing a pre-existing cert/key into a Java Key Store. You will also need the !InCommon intermediary cert, and the !AddTrust Root CA cert for this process. See [[=#ImportKeyUtil|'''Import Key Util''']], [!InCommon], and [!AddTrust] for more.
 {{{
 -bash-3.2$ openssl pkcs8 -topk8 -nocrypt -in idp.new.key -out idp.new.key.der -outform der
@@ -233 +233 @@
 
 12. Test config changes according to [[https://iam.alaska.edu/shib/wiki/TestIdPConfig|Test IdP Config Change]] procedure. 
+
+References:
+* [=#ImportKeyUtil][[ImportKeyUtil|Import Key Utility]]
+* [[https://www.incommon.org/cert/repository/AddTrustExternalCARoot.txt|AddTrust External CA Root]]
+* [[https://www.incommon.org/cert/repository/InCommonServerCA.txt|InCommon Server CA]]