Does Java Provide a Way to Centralize Certificate Keystores over a Domain or Enterprise?

(Doc ID 2257042.1)

Last updated on APRIL 30, 2017

Applies to:

Java SE JDK and JRE - Version 6 and later
Information in this document applies to any platform.


Given the introduction of a new CA Certificate in an application environment, it is desirous to import the certificate to the Java cacerts keystore.  In a large environment with multiple JREs over multiple clients and servers, must the certificate be imported manually to the cacerts keystore for each Java client and server?  Or, is there a way to configure a centralized keystore, and thereby, achieve centralized CA lookups for the different Java clients and severs?


Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms