IBM QRadar SOAR: Configuring HTTP Address and TLS/SSL settings: Difference between revisions
(Created page with " = Managing Keystore with Keytool and Resutil = 1) Connect to CLI, using '''resadmin''' user 2) Backup keystore <syntaxhighlight lang="bash"> cd /crypt/certs cp keystore keystore_backupYYYYMMDD </syntaxhighlight> 3) Use the following command to list all entries in the keystore with detailed information: <syntaxhighlight lang="bash"> keytool -list -v -keystore keystore -storepass "$(sudo resutil keyvaultget -name keystore)" </syntaxhighlight> 4) Delete an alias fr...") |
(No difference)
|
Revision as of 17:50, 25 September 2025
Managing Keystore with Keytool and Resutil
1) Connect to CLI, using resadmin user
2) Backup keystore
cd /crypt/certs
cp keystore keystore_backupYYYYMMDD
3) Use the following command to list all entries in the keystore with detailed information:
keytool -list -v -keystore keystore -storepass "$(sudo resutil keyvaultget -name keystore)"
4) Delete an alias from the keystore ==
To remove a specific alias (e.g., `co3`) from the keystore:
keytool -delete -alias co3 -keystore keystore \
-storetype PKCS12 \
-storepass "$(sudo resutil keyvaultget -name keystore)"
5) Import a certificate into the keystore
To import a `.pfx` certificate into the keystore under a new alias:
keytool -importkeystore \
-srckeystore /home/resadmin/certificates/certificate.pfx \
-srcstoretype pkcs12 \
-srcalias <SRC ALIAS> \
-destkeystore keystore \
-destalias co3 \
-deststorepass "$(sudo resutil keyvaultget -name keystore)" \
-destkeypass "$(sudo resutil keyvaultget -name keystore)"
Change HTTP Address (default url)
sudo resutil configset -baseurl "https://soar.company.com"