Follow these steps to create a server key pair and a server certificate. On the server system, issue the following command to to create a server key pair in a key store guarded by the secretServerPassword password: keytool -genkey -alias MyServerName -keystore ~/vault/ServerKeyStore Enter keystore password: secretServerPassword ... Issue the following command (all on one line) to create a certificate named ServerCertificate from this key: keytool -export -alias MyServerName \ -keystore ~/vault/ServerKeyStore -rfc -file ServerCertificate \ -storepass secretServerPassword