Migrating JRE keystore files

The IBM® SPSS® Collaboration and Deployment Services keystore file (platformKeystore) is designed to store one AES key, which encrypts the end-user password. The keystore file and the key inside it are generated by the native JRE implementation, so varies among different JREs. If the source and target JREs are different before and after migration, a keystore migration tool is available to help you transform keystore file formats between different JREs.

Example:
keystoreUtils.bat/keystoreUtils.sh
Requirements:
  • Source and target JREs must be installed.
  • You must manually copy the keystore file (platformKeystore) from <repository installation directory>\keystore to the working directory.
Location:
<repository installation directory>\applications\keystore-utils

For advanced users

Advanced users can use the following procedure to migrate JRE keystore files.

  1. Modify jvm_settings.properties:
    1. Set the variable "jvm_source" value to the source JRE path that has the same vendor as source IBM SPSS Collaboration and Deployment Services Repository Server uses
    2. Set the variable "jvm_target" value to a valid JRE file path, the vendor of this JRE must be same as the JRE used by the target IBM SPSS Collaboration and Deployment Services Repository Server

      If JRE in Windows OS, must use double slashes as the file path separator, e.g. C:\\Program Files\\IBM\\Java80, otherwise an error message will be obtained when run this tool: ***Error***: jvm path doesn't point to a valid JVM

  2. Run the keystore migration tool. Example: keystoreUtils.bat / keystoreUtils.sh. Choose the appropriate script for your operating system.
  3. Enter the correct keystore password when running keystoreUtils.
  4. After the tool runs successfully, you'll see a new folder called new_keystore in the working directory that contains the newly generated keystore file platformKeystore. Use this new file when installing the target IBM SPSS Collaboration and Deployment Services Repository Server.