Adding Certificate to Application's Truststore    

Whenever a product is running in secured (HTTPS/IMAPS/POPS/LDAPS) mode, it is required to trust the SSL Certificate of the target server for ServiceDesk Plus to establish a secure connection.

Steps Required:

The following steps should be followed to establish connection between ServiceDesk Plus and the corresponding secured server.

1. Download the .zip file from the links given below and extract it to "ManageEngineServiceDesk"

For Linux:

https://downloads.zohocorp.com/dnd/ServiceDesk_Plus/o_1af3b3o2010mg10kbj961mdt18sq1/lincertgeneration.zip

For Windows:

https://downloads.zohocorp.com/dnd/ServiceDesk_Plus/o_1af360niepdjr7j1flk1o323fa1/wincertgeneration.zip  

 

2. Connect to the command prompt. Go to "ManageEngineServiceDesk" and run the batch file with the following format:

For Linux:

test@ubuntu:~/ServiceDesk$ sh gencert.sh servername:portnumber

For Windows:

C:>ManageEngineServiceDesk> gencert.bat  servername:portnumber
 

3. On running the command, you will receive an exception PKIX and will ask you to enter a value. Provide value 1 that will generate a file named jssecacerts under "ManageEngineServiceDesk" .

4. Copy the jssecacerts file under "ManageEngineServiceDeskjrelibsecurity" folder.  

 

Now, restart the ServiceDesk Plus application for the connection with the secured server to work.

Examples for gencert.bat usage: 

Consider a target server to which the connection is made; for instance, we will consider the target server as a Mail server in a win7-test machine. You can add the certificate of the mail server to the application's truststore using the command below:

gencert.bat win7-test:9443

At the end of the script execution, a message is shown as "Added certificate to keystore 'jssecacerts' using alias 'win7-test-1'

It automatically gets saved as "jssecacerts".

Note: You need not manually relocate the jssecacerts file to <SDP_HOME> every time the script is run. The gencert script will override any existing jssecacert file found in either the <SDP_HOME> or /jre/lib/security, following the specified priority order. If the jssecacert is not present, then the script will create a new jssecacert file.