Page History

...

If the Root CA private key and certificate is to be generated by JOC Cockpit then the following popup window appears:

Image Modified

The requested Distinguished Name (DN) is a unique identifier for the certificate.

...

For security reasons private keys and certificates of Controllers and Agents are not stored with JOC Cockpit. Instead, they are requested to be created by a command line client the Certificate Rollout Client available from the Start Script that ships with each Controller and Agent instance. The command line clientCertificate Rollout Client

• does not require user/password authentication for JOC Cockpit but is started with a security token that authenticates the client.
• requests JOC Cockpit to create a private key and certificate on-the-fly that are returned to the client as a response to its request.
• adds the private key to the Controller or Agent instance's keystore and adds the certificate to the respective truststore.
• updates the Controller or Agent instance's configuration to use the updated keystore and truststore.

...