I am trying to add a certificate to the runtime config using OD/Windows/Preferences/OD/Certificates and receiving an error "Certificate already exists with a different alias". Based on the addcertificate.jsp in Runtimeconfig app the message is a default else. The certificate I was given is a .pem. What type of file type is needed? Do I need 3 certs (domain, intermediate, root) and install separately or is something else wrong? I have a new project that requires Web Services using SSL which I have no experience in, and it seems like there is little info on the topic.

In simulation you can use the interface in the preferences or start tomcat and use the runtimeconfig (localhost:8080/runtimeconfig) Both will update the same location. I prefer the runtimeconfig. You may want to consult the tomcat documentation for setting up SSL.

Certificate already exists with a different alias, means exactly that, you already have added the certificate. For simulation testing I usually just create a self signed certificate with OD will help you create and configure tomcat as this:

    <Connector protocol="org.apache.coyote.http11.Http11Protocol"

           port="8443"

           enableLookups="true" disableUploadTimeout="true" 

           acceptCount="100"  maxThreads="200"

           scheme="https" secure="true" SSLEnabled="true"

           keyAlias="tomcat"

           keystoreFile="C:\tools\tomcat-6.0.16-5.1\lib\trusted_weblm_certs.jks" keystorePass="password"

           clientAuth="false" sslProtocol="TLS"/>    

Hi, Ross. I created a new cert per your suggestion and was able to import to the keystore through OD and DD Admin Console. I can delete it and add without error. The below is copied from the DD Admin Console (runtime config) which does not show the cert I am trying to import but still receiving the error "Certificate already exists with different alias". I am at a loss. Thanks


rptest Owner: CN=rptestnwp,OU=development,O=realpage,L=greenville,ST=sc,C=us
Issuer: CN=rptestnwp,OU=development,O=realpage,L=greenville,ST=sc,C=us
Serial Number: 44:70:38:a2
Signature Algorithm: SHA256withRSA
Valid from: Wed Apr 05 10:16:13 EDT 2017 until: Thu Apr 05 10:16:13 EDT 2018
Certificate fingerprints:
MD5: b2:31:1d:ab:88:f6:0b:56:08:bc:37:7b:3e:0c:12:59
SHA: 40:6d:72:25:82:da:e8:54:91:ec:3a:44:51:76:db:08:29:06:de:a2

Save certificate to file
sipca Owner: CN=SIP Product Certificate Authority,OU=SIP Product Certificate Authority,O=Avaya Inc.,C=US
Issuer: CN=SIP Product Certificate Authority,OU=SIP Product Certificate Authority,O=Avaya Inc.,C=US
Serial Number: 00
Signature Algorithm: SHA1withRSA
Valid from: Thu Jul 24 20:33:17 EDT 2003 until: Tue Aug 17 01:19:39 EDT 2027
Certificate fingerprints:
MD5: f4:22:f0:6a:c7:b1:a4:43:44:c9:d8:20:41:20:fd:05
SHA: 4e:95:55:2e:f2:ce:93:ed:d2:55:d8:0f:4c:d1:32:5c:7e:b9:88:59

I am not sure what more I can say here "Certificate already exists with a different alias, means exactly that, you already have added the certificate."

Maybe ask a different question.