1. Open the domain.xml.init file.
For Linux:
install_dir/jboss/domain/configuration/domain.xml.init
For Windows:
install_dir\jboss\domain\configuration\domain.xml.init
2. Search for the instance of "ssl key-alias="tomcat" password=password"
3. Take note of the value of the password attribute.
4. For each root CA and intermediate CA certificate, run the appropriate commands.
For Windows:
cd install_dir\SMAS\jboss\bin
service.bat importcacert password CA_cert_alias CA_file_path
For Linux:
cd install_dir/SMAS/jboss/bin
initcst.sh importcacert password CA_cert_alias CA_file_path



1) Generating Certificate :-

keytool.exe -genkeypair -alias tomcat -keyalg RSA -sigalg SHA512withRSA -keysize 2048 -validity 3650 -ext bc=ca:true -dname "CN=APACSGU4V03.apac.nsroot.net, OU=164176, O=Citigroup\ Inc., L=Singapore, ST=SG, C=SG" -keypass APACSGU4V03.apac.nsroot.net@keystore-2 -keystore "C:\Program Files\EMC\SMAS\jboss\standalone\configuration\keystore" -storepass APACSGU4V03.apac.nsroot.net@Keystore-2


keytool.exe -certreq -keystore "C:\Program Files\EMC\SMAS\jboss\standalone\configuration\keystore" -alias tomcat -sigalg SHA512withRSA -file C:\temp\APACSGU4V03-self.csr -storepass APACSGU4V03.apac.nsroot.net@Keystore-2

keytool.exe -genkeypair -alias univmaxrestforwardingclient -keyalg RSA -sigalg SHA512withRSA -keysize 2048 -validity 36500 -ext bc=ca:true -dname "CN=univmaxrestforwardingclient, OU=164176, O=Citigroup\ Inc., L=Singapore, ST=SG, C=SG" -keypass APACSGU4V03.apac.nsroot.net@Keystore-2 -keystore "C:\Program Files\EMC\SMAS\jboss\standalone\configuration\keystore" -storepass APACSGU4V03.apac.nsroot.net@Keystore-2

keytool.exe -list -keystore "C:\Program Files\EMC\SMAS\jboss\standalone\configuration\keystore" -storepass APACSGU4V03.apac.nsroot.net@Keystore-2

========================================================

2) Import certificate

keytool -import -alias root -trustcacerts -file "C:\Temp\Citi Prod CAs Base64\CitiInternalRootCA_b64.cer" -keystore "C:\Program Files\EMC\SMAS\jboss\standalone\configuration\keystore" -storepass APACHKIADU4V03.apac.nsroot.net@Keystore-2

keytool -import -alias intermiediate1 -trustcacerts -file "C:\Temp\Citi Prod CAs Base64\CitiInternalPolicyCA_b64.cer" -keystore "C:\Program Files\EMC\SMAS\jboss\standalone\configuration\keystore" -storepass APACHKIADU4V03.apac.nsroot.net@Keystore-2

keytool -import -alias intermiediate2 -trustcacerts -file "C:\Temp\Citi Prod CAs Base64\CitiInternalDeviceCA01_b64.cer" -keystore "C:\Program Files\EMC\SMAS\jboss\standalone\configuration\keystore" -storepass APACHKIADU4V03.apac.nsroot.net@Keystore-2

keytool -import -alias tomcat -trustcacerts -file C:\Temp\APACHKIADU4V03.csr -keystore "C:\Program Files\EMC\SMAS\jboss\standalone\configuration\keystore" -storepass APACHKIADU4V03.apac.nsroot.net@Keystore-2

keytool -list -keystore "C:\Program Files\EMC\SMAS\jboss\standalone\configuration\keystore" -storepass APACHKIADU4V03.apac.nsroot.net@Keystore-2

================
3) Edit nethost file in SYMAPI server

169.178.178.72    Any

===================

4) edit netcfg under C:\Program Files\EMC\SYMAPI\config>

SYMAPI_SERVER  -  TCPIP  sgctctilxsan1p  10.85.70.80  2707  ANY
============================

5) Set the below environemtal variables

SYMCLI_CONNECT=SYMAPI_SERVER
SYMCLI_CONNECT_TYPE=REMOTE
===========================