AES 7.X CSR Private Key

[wallot]

I need to backup the private and public keys generated with a CSR. Would anyone know the folder in AES where these are stored? Troubleshooting and the site is getting aggravated that they have to key creating new entity certs.

Thanks!

 

[kyle555]

probably in some internal keystore - maybe jks format. keytool commands might get them, but don't be surprised if the internal keystore is protected with a way you can't get in.

If you generate your own CSR in Linux, then you're in control of the key.

https://www.thesslstore.com/knowledgebase/ssl-generate/csr-generation-guide-for-nginx-openssl/

It doesn't matter what you fill in the CSR for CN and stuff - whatever is in the SMGR CA for that stuff is what the certificate will be signed with.

What/why does your troubleshooting involve changing the cert?

 

[wallot]

Once the certificate is removed, so are the keys. So having the keys will prevent having to run a new CSR when we want to return to that certificate.

 

[kyle555]

Yeah, but you'll never get another CSR signed with the same key.

That's why you'd have to generate your own key and CSR. Now, presuming you did that and got a signed cert, you're free to remove it from the AES and re-add it cause you have the generated cert and the private key tied to it.

What exactly are you doing that's requiring you to remove/readd certs?

 

[wallot]

I know, just looking for where the keys are stored. Thanks