Follow these steps to import each certificate into the other's trust store. On the client, import the server certificate into the client's trust store: keytool -import -alias favoriteServerCertificate \ -file ServerCertificate -keystore ~/vault/ClientTrustStore \ -storepass secretClientTrustStorePassword On the server, import the client certificate into the server's trust store: keytool -import -alias Client_1_Certificate \ -file ClientCertificate -keystore ~/vault/ServerTrustStore \ -storepass secretServerTrustStorePassword