https://jamfnation.jamfsoftware.com/article.html?id=138 Overview If you have a private key, an SSL certificate, and a certificate bundle from a Certificate Authority (CA), you can use OpenSSL to create a certificate keystore that Tomcat can utilize. Requirements The following components are required to create a keystore for Tomcat: OpenSSL Private key with a .key file extension from CA SSL certificate file from CA Certificate bundle from CA Procedure Execute the following command to create a .p12 keystore bundle from the private key, SSL certificate, and certificate bundle: openssl pkcs12 - export - in mycert . crt - inkey mykey . key - out mycert . p12 - name tomcat - CAfile myCA . crt - caname root - chain Enter a password of “changeit” when prompted. Note: If a different password is used, it will need to be specified in the server.xml file. Once the .p12 keystore bundle is created, move it to the root of the Tomcat directory. Modify the server.xml fi...