Nortel Networks NN42030-300 manual Viewing the contents of the keystore

Page 40

40Postinstallation

ATTENTION

Nortel strongly recommends that you back up the keystore directory to protect the files against overwriting, deletion, or corruption.

6Restart the server:

/sbin/service mobilitygw restart

7When prompted, enter the root password.

--End--

Importing a preinstalled CA root or intermediate certificate

You must know the absolute path to import a preinstalled CA root certificate into the keystore. Enter one of the following commands:

/usr/java/jdk1.5.0_03/bin/keytool -import

-trustcacerts -keystore .keystore -alias root -file <absolute_path_root_certificate_file>

OR

/usr/java/jdk1.5.0_03/bin/keytool -import -trustcacerts -keystore .keystore -alias intermediate -file <absolute_path_intermediate_cert_file>

Viewing the contents of the keystore

To assist with troubleshooting, you can review the contents of the keystore. Enter the following command:

/usr/java/jdk1.5.0_03/bin/keytool -list -v -keystore

.keystore

Change the keystore default password

The default password for the keystore is firsthand. For security reasons, you should change the default password.

Procedure 9

Changing the keystore default password

Step Action

1At the MCG server, log on to the server as nortel.

2To become the superuser, enter the following command: su

3To change the keystore default password, enter the following command:

Nortel Mobile Communication 3100 Series Portfolio

Nortel Mobile Communication Gateway 3100 Installation and Upgrades

NN42030-300 02.03 Standard

9 May 2008

Copyright © 2007, 2008 Nortel Networks

Image 40
Contents NN42030-300 Legal Notice Contents System software maintenance Copyright 2007, 2008 Nortel Networks Copyright 2007, 2008 Nortel Networks New in this release FeaturesOther changes Revision history How to get help Getting help through a Nortel distributor or reseller Introduction SubjectConventions Intended audienceTerminology Related informationText conventions cont’d NTPs Introduction Overview FundamentalsMCG 3100 server components Hardware components Hardware requirements SpecificationSoftware components Overview of the MC 3100 installation Installation optionsInstallation overview Fundamentals Preinstallation Linux base installationPreinstallation Enterprise network verificationSupported Ldap servers Preinstallation Installation Nonredundant and redundant server implementationsNonredundant server option Redundant server optionProcedure Installing the MCG 3100 software Software installationRules for redundant server implementations Appinstall End Procedure Logging on to the MCG 3100 Web Console PostinstallationMCG 3100 Web Console logon Procedure Configuring the MCG 3100 parameters MCG 3100 parameter configurationMCG 3100 configuration parameter fields Field Description Postinstallation Procedure Adding a license file License fileLicence file troubleshooting ErrorManage TLS certificates Enroll with a Certificate AuthorityCertificate Signing Request generation Procedure Generating a CSR To generate the CSR, enter Signed TLS certificate Procedure Obtaining a signed TLS certificateFirsthand Procedure Obtaining a CA root or intermediate certificate CA root and intermediate certificatesProcedure Installing the root and signed certificates Root and signed certificate installationUsr/java/jdk1.5.003/bin/keytool -import Viewing the contents of the keystore Change the keystore default passwordCA root certificate distribution Sudo /sbin/service mobilitygw restartCd /opt/SQmobilityGW/tomcat/conf Procedure Installing a root certificate on a Nokia device Click File ManagerManage TLS certificates Postinstallation System software upgrades System software maintenanceProcedure Upgrading the MCG 3100 system software from CD System software maintenance PM EST Procedure Removing an SU Sudo /opt/mobilitybase-2.1-XX/postpatch.shSystem software uninstallation Sudo /opt/mobilitybase-2.1-XX/postunpatch.shShell commands Admin shell accessProcedure Uninstalling the MCG 3100 system software Sudo /sbin/service mobilitygw start Sudo /sbin/service mobilitygw stopSudo /sbin/service mobilityadmin start Sudo /sbin/service mobilityadmin stopProcedure Checking the Gateway Server processes Root 9498 9367 0 1402 pts/0 000000 grep SQMobilityGWRoot 9542 9367 0 1404 pts/0 000000 grep SQMobilityAdmin Procedure Checking the Administration Server processesProcedure Backing up the databases Mysqldump --opt --all-databases backup.sqlProcedure Restoring the databases To start the server processes, enter System software maintenance Appendix a Port numbers and protocols Port usage page 57 lists the port usage details for MCGTCP JVM Appendix B Self-signed certificate generation Procedure Generating self-signed certificatesUsr/java/jdk1.5.003/bin/keytool -genkey Days. Nortel recommends using a value 3650 Index Copyright 2007, 2008 Nortel Networks Page Nortel Mobile Communication 3100 Series Portfolio