See complete how to guide here: Instructions
Example:
Keytool found in SAM JRE program files folder (“C:\Program Files (x86)\SAMIII\jre\jre1.8.0_161\bin”)
keytool -keysize 2048 -genkey -alias SAM -keyalg RSA -keystore SAM.jks
Keystore file gets created in the same directory as “keytool” (“C:\Program Files (x86)\SAMIII\jre\jre1.8.0_161\bin”)
keytool -certreq -keyalg RSA -alias SAM -file AIOMOKCC3AP201.csr -keystore SAM.jks
CSR file gets created in the same directory as “keytool” (“C:\Program Files (x86)\SAMIII\jre\jre1.8.0_161\bin”)
*** SUBMIT CSR TO PKI ***
keytool -import -alias root -keystore SAM.jks -trustcacerts –file C:\Temp\root.cer
keytool -import -alias intermed1 -keystore SAM.jks -trustcacerts –file C:\Temp\intermed1.cer
keytool -import -alias intermed2 -keystore SAM.jks -trustcacerts –file C:\Temp\intermed2.cer
keytool -import -alias SAM -keystore SAM.jks -trustcacerts –file C:\Temp\AIOMOKCC3AP201.cer
Copy “SAM.jks” (“C:\Program Files (x86)\SAMIII\jre\jre1.8.0_161\bin\SAM.jks”) to the SAM program files folder (“C:\Program Files (x86)\SAMIII”)
Modify server.config file (“C:\Program Files (x86)\SAMIII\config\server.config”) to specify JKS file name and password:
server.https.ssl-keystore=SAM.jks
server.https.keystore-password=
Restart SAM service