You are here: Configuring ZixGateway > Certificates > Generating Unique Keystore Files

Generating Unique Keystore Files

You must generate a keystore file for the URL that you want to set up on your ZixDirect Web appliance, including your default ZixDirect URL. The keystore file holds the public and private key for a single hostname and is required to create a Certificate Signing Request (CSR). Use the following procedure to create unique keystore files.

Note: The password changeit is used in these instructions and must be entered as shown. Do not change it.

To generate a new key:

1. If you are already logged in to the ZixDirect Web appliance, go to step 2.

OR

To log in to the ZixDirect Web appliance as zixadmin:

a. SSH in to the ZixDirect Web appliance and log in.
b. At the command line, enter:

sudo -i

2. Change to the tomcat directory.

cd /zix/system/tomcat

3. Generate the new keystore file:

/zix/system/j2sdk/bin/keytool -genkey -keysize 2048 -alias zdws -keyalg RSA -sigalg SHA256withRSA -keystore .keystore_<ZixDirect_URL_Name>

Enter keystore password: changeit

4. Follow the genkey prompts and enter the correct values:
Note: The genkey prompts displayed below include sample responses after each prompt. Do not enter the sample entries; enter the values that apply to your situation:

What is your first and last name?

[Unknown]: <enter the public host name associated with the public IP address on the ZixDirect Web appliance for the URL you are setting up. (e.g. securemail.customer.com)>

What is the name of your organizational unit?

[Unknown]: <QA>

What is the name of your organization?

[Unknown]: <Company Name>

What is the name of your City or Locality?

[Unknown]: <Dallas>

What is the name of your State or Province?

[Unknown]: <Texas>

Note: You must spell out the State or Province name.

What is the two-letter country code for this unit?

[Unknown]: <US>

Is CN=DNS Hostname, OU=QA, O=Zix Corporation, L=Dallas, ST=Texas, C=US correct?

[no]: <yes>

Enter key password for <zdws>

(RETURN if same as keystore password): press enter

Note: Do not change the password.