Prepare your application server

The PKI connector sample implementation uses an Apache Tomcat application server, but any application server can be used with a PKI connector. It is a best practice to deploy the application server on a different computer than the one that hosts BlackBerry UEM.
  1. Open a command window.
  2. Run the following command: 
    cd <unzipped path>/gd-ca-adapters/src/main/java/com/good/adapters/entrust/util
  3. Go to the target/classes folder and run the following command: 
    java com.good.adapters.entrust.util.GenerateSSLCertificateForEntrustCA ENTRUST_HOSTNAME <password>
  4. In the list of certificates to trust, select the root certificate.
  5. Copy the resulting jssecacerts file to the following Java installation directory: $JAVA_HOME/jre/lib/security.
  6. Edit the Tomcat server.xml file ($TOMCAT_DIR/conf/server.xml) to specify the port that the PKI onnector listens on and the paths to the KeyStore and TrustStore. See the following example (change the port, KeyStore, and TrustStore values as necessary): 
    <Connector port="8090" protocol="HTTP/1.1"
    connectionTimeout="20000"
    redirectPort="8443" />

<Connector
    protocol="HTTP/1.1"
    port="8443" maxThreads="200"
    scheme="https" secure="true" SSLEnabled="true"
    keystoreFile="/c:/newcerts/foobar.jks" keystorePass="foobarpwd"
    truststoreFile="/c:/newcerts/cacerts.jks" truststorePass="cacertspassword"
    clientAuth="true" sslProtocol="TLS"/>
Deploy the PKI connector war file to the application server.