# Start the cvCertManager utility

Use the cvCertManager utility to configure or update the SSL certificate using the following two setup paths:

- Guided Setup: Generate a private key and Certificate Signing Request (CSR), import CA-signed certificates, and configure Tomcat.

- Existing Certificates Setup: Configure Tomcat by using an existing keystore (`.pfx`, `.p12`, or `.jks`).

Note

You must run the cvCertManager utility procedure on every server that hosts the Commvault Tomcat service.

## Before You Begin

- Log on to the server by using an account with Administrator (Windows) or root (Linux) privileges.

- Ensure that the required certificate files are available.

- If you are using Existing Certificates Setup, have the keystore file and its password available.

## Start the cvCertManager Utility

1. Open a command prompt or terminal.

2. Navigate to the Commvault Base directory.

   Operating System | Command
   --- | ---
   Linux | `cd </commvault/Base>`
   Windows | `cd </commvault/Base>`

3. Start the utility.

   - Linux

         ./cvCertManager.sh

   - Windows

         cvCertManager.cmd

4. From the main menu, select one of the following options:

   Option | Description
   --- | ---
   Guided Setup | Generate a CSR, import the signed certificate, and configure Tomcat. For instructions, see Using guided setup to configure SSL certificate
   Existing Certificates Setup | Configure Tomcat by using an existing keystore. For instructions, see Configure Tomcat using an existing keystore

×

Loading...