Support articles

Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.

How to check Policy Manager Server alias for CA certificate ?

Issue:

How to check Policy Manager Server alias for CA certificate ?

Resolution:

You can open a Command Prompt with administrator privileges and navigate to the following folder: C:\Program Files\WithSecure\Policy Manager\jre\bin

Then run command: keytool.exe -list -storetype pkcs12 -keystore c:\test\keystore.p12 -v

This command lists the contents of a PKCS#12 keystore file and prints full details for each entry.

First you’ll get the keystore type, provider, and number of entries. Then, for each entry:

  • The alias (the name the entry is stored under)
  • The entry type, such as PrivateKeyEntry (a private key plus its certificate chain) or trustedCertEntry (a certificate only)
  • The creation date
  • The certificate chain length
  • For each certificate: owner and issuer (distinguished names), serial number, validity dates, SHA-1 and SHA-256 fingerprints, signature algorithm, public key algorithm and size, and any extensions such as Subject Alternative Names and key usage