ISR Computing -

Tripwire Enterprise Console Self-Signed Certificate

When you initially install Tripwire console you will probably install it on host named "tripwire", and later on you will decide to convert the hostname to some internal standard.

As an example you changed hostname from "tripwire" to "nytw01". Then you requested license from Tripwire support, and installed it.

Everything is fine, except that SSL certificate is still showing Tripwire!!!!!

How to fix it? First, create directory C:\SSL.

Second, get the keystore password from "webserver.keystore.passphrase="> (located in the server.properties file).

C:\Program Files\Tripwire\TE\Server\jre\bin>cd C:\SSL 
C:\SSL>"C:\Program Files\Tripwire\TE\Server\jre\bin"\keytool -genkey -alias trip
wire -keyalg RSA -keystore ./keystore -validity 7304
Enter keystore password:
Re-enter new password:

What is your first and last name?
  [Unknown]:  nytw01

What is the name of your organizational unit?
  [Unknown]:  Technology
What is the name of your organization?
  [Unknown]:  ISR Computing
What is the name of your City or Locality?
  [Unknown]:  New York
What is the name of your State or Province?
  [Unknown]:  New York
What is the two-letter country code for this unit?
  [Unknown]:  US
Is CN=nytw01, OU=Technology, O=ISR Computing, L=New York, ST=New York, C=US
 correct?
  [no]:  yes

Enter key password for <tripwire>
        (RETURN if same as keystore password):

C:\SSL>cp keystore <te_root>\data\security\tomcat.ks

Restart Tripwire Enterprise services.