Java Control Panel - Keystore Files

Q

What keystore files are used to hold certificates managed by Java Control Panel? I want to manage them directly using the "keytool" command?

✍: FYIcenter.com

A

From each user point of view, there are 2 Java certificate keystore files on a Windows system:

1. System-Level Signer CA Certificates Keystore:

Location: "\Program Files\java\jre7\lib\security\cacerts"
Password: "changeit"
Contents: All signer CA certificates known at the time of Java release

2. User-Level Trusted Certificates Keystore

Location:
   "\Users\xyz\AppData\LocalLow\sun\Java\Deployment\security\trusted.certs"
Password: ""
Contents: Empty by default

You can manage both keystore files either with "Java Control Panel" interface, or with "keytool" commands.

2012-07-22, 4303👍, 0💬