Securing Commvault Compliance Search

If creating a secure Commvault Content Store solution for O365, a .pfx file is what is utilized for the ContentStore servers to securely communicate with the Exchange server. However, the .pfx file can be leveraged to generate the keystore file (.jks) necessary to secure the Compliance Search web site. The following command imports into the keystore and generates the keystore file we can specify in server.xml.

keytool -importkeystore -srckeystore C:\CVInstall\keys\companyA.pfx -srcstoretype pkcs12 -destkeystore C:\CVInstall\keys\companyA.jks -deststoretype jks

More Information on the Keytool

If you read a bit down in the Oracle link…

The command importkeystore is used to import an entire keystore into another keystore, which means all entries from the source keystore, including keys and certificates, are all imported to the destination keystore within a single command. You can use this command to import entries from a different type of keystore. During the import, all new entries in the destination keystore will have the same alias names and protection passwords (for secret keys and private keys).