Copy Your Existing Key Store

If you've already created a key store as the part of the initial installation of EJBCA on another instance, copy it to the p12 directory in EJBCA. If no such directory exists, feel free to create one.

Deploy TLS Keystores to WildFly

Run this command to copy the existing key stores from p12 to to wildfly_home/standalone/configuration/keystore:

$ ant deploy-keystore

Import the Management CA Certificate 

1. Verify that web.reqcertindb=false has been set in conf/web.properties (otherwise: do so and run ant deployear again). 
2. Download the Management CA certificate from the RA UI on the instance hosting the Management CA
3. From the EJBCA CLI on the RA, run the following command to import the Management CA certificate on the RA:
   
   

   $ bin/ejbca.sh ca importcacert ManagementCA ManagementCA.cacert.pem -initauthorization -superadmincn SuperAdmin

Next Step: Continue as VA or RA

• Continue setting up EJBCA as a VA
• Continue setting up EJBCA as an RA