TRIUMF Certificate Authority

Sun (Oracle) Java (Windows):

This procedure adds the TRIUMF CA to Sun (Oracle) Java as used by e.g. the Firefox Java Plugin

Click the "Download Root Certificate" button on ca.triumf.ca as per "Other Clients" and save the PEM file in \tmp

  • Locate the Java keystore, typically located in C:\Program Files\Java\jre6\lib\security\cacerts.

    Using the Windows command line, you can list the default trusted CAs using
    cd C:\Program Files\Java\jre6
    bin\keytool -list -keystore lib\security\cacerts -storepass changeit

  • Add the TRIUMF CA using
    bin\keytool -keystore lib\security\cacerts --importcert -file \tmp\triumfca.pem -trustcacerts -storepass changeit -alias TRIUMF