Replacing the Tomcat Certificate of the UltraVR

Function

For security purposes, users may want to use a Secure Socket Layer (SSL) certificate issued by a third-party certification authority. The UltraVR allows users to replace the Tomcat certificate of users but the users must provide the Tomcat certificate and public/private key pair. The update to the certificate can take effect only after UltraVR is restarted. Update the certificate in off-peak hours.

Format

replace_cert.sh

Parameters

None

Usage Guidelines

1. Use PuTTY to log in as root to the server where the UltraVR Server is installed.
2. Run the TMOUT=0 command to prevent PuTTY from exiting due to session timeout.
   

   After you run this command, the system continues to run when no operation is performed, resulting a risk. For security purposes, you are advised to run exit to exit the system after completing your operations.

3. Run cd /opt/UltraVR/Runtime/bin command to enter the script save path.
   

   In Linux, the installation path of the UltraVR Server is /opt/UltraVR. The path is fixed.

4. Run the sh shutdownSystem.sh command, enter y and press Enter to stop the UltraVR Server.
5. Run the sh replace_cert.sh command to replace the Tomcat certificate.
6. Enter the path of the key store and certificate file name. For example, enter /opt/jks.keystore and press Enter.
   

   Do not save the new certificate to the /opt/UltraVR/Runtime/Tomcat6/certs directory since the old certificate is stored under the directory.

7. Enter the file type of the key store (the JKS, JCEKS, and PKCS12 file type are supported) and press Enter.
8. Enter the correct password for the certificate and press Enter.
9. Enter y and press Enter.
10. Run the sh startSystem.sh command to start the UltraVR.

Example

linux-h8g4:/opt/UltraVR/Runtime/bin # sh shutdownSystem.sh  

Are you sure you want to shut down the UltraVR service? (y/n): y 

The service is shutting down. Please wait... 

The UltraVR service is shut down successfully. 

linux-h8g4:/opt/UltraVR/Runtime/bin # sh replace_cert.sh 

Please input cert file:/opt/server.jks 

Please input the keystore type [JKS]: JKS 

Please input secret key: 

You are going to change the certfile of web,Are you sure you really want to perform the operation? (y/n): y 

y 

Change certfile successfully!