Changing Keystore and Truststore Passwords

The Unwired Platform (used by both Unwired Server and Sybase Control Center to manage certificates and keys) keystore and truststore locations are protected by a password. In production environments, replacing default passwords is encouraged.

1. Open a command prompt window from this location: <UnwiredPlatform_InstallDir>\UnwiredPlatform\Servers\UnwiredServer\Repository\Security.
2. Run commands to change the current password for the keystore, truststore, and private key entries as required for your environment.

   You must enter the same password for a keystore and each of the private entries associated with that store.

   There is no provision in Sybase Control Center to specify a different password for the private key aliases.

   For the keystore password, use: keytool -storepasswd -new NewPwd -keystore Security\keystore.jks

   For the truststore password, use: keytool -storepasswd -new NewPwd -truststore Security\truststore.jks

   For private key entries in keystore, use: keytool -keypasswd -alias Name -new NewPwd -keystore Security\keystore.jks

3. At the prompt, enter the current password.
   If this is the first time changing the password, enter the default password of changeit. Otherwise, enter the current password.
4. In Sybase Control Center, configure the Primary Unwired Server SSL certificates to use these passwords. If these certificates are already configured, update the passwords currently configured.
   Click Servers > PrimaryServerName > Server Configuration > General, then click the SSL Configuration tab. For details, see Defining Certificates for SSL Encryption .
   If you do not ensure the correct password is set, you can expect a connection failure. See Keystore Tampering Message Suggests that Connection with Unwired Server Fails in the Troubleshooting guide.
5. Restart all Unwired Platform services using the Windows Control Panel services tool.