Changing Keystore and Truststore Passwords

The SAP Mobile Platform (used by both SAP Mobile Server and SAP Control Center to manage certificates and keys) keystore and truststore locations are protected by a password. In production environments, replacing default passwords is encouraged.

1. Open a command prompt window from this location: SMP_HOME\Servers\UnwiredServer\Repository\Security.
2. Run commands to change the current password for the keystore, truststore, and private key entries as required for your environment.

   You must enter the same password for a keystore and each of the private entries associated with that store.

   There is no provision in SAP Control Center to specify a different password for the private key aliases.

   For the keystore password, use: keytool -storepasswd -new NewPwd -keystore Security\keystore.jks

   For the truststore password, use: keytool -storepasswd -new NewPwd -truststore Security\truststore.jks

   For private key entries in keystore, use: keytool -keypasswd -alias Name -new NewPwd -keystore Security\keystore.jks

3. At the prompt, enter the current password.
   If this is the first time changing the password, enter the default password of changeit. Otherwise, enter the current password.
4. In SAP Control Center, configure the SSL certificates to use these passwords. If these certificates are already configured, update the passwords currently configured.
   Click Configuration > General, then click the SSL Configuration tab. For details, see Defining Certificates for SSL Encryption.
   If you do not ensure the correct password is set, you can expect a connection failure. See Key or Keystore Messages Received in Server Log in the Troubleshooting guide.
5. Restart all SAP Mobile Platform services using the Windows Control Panel services tool.