Certificate Services Support


How to install Entrust L1K Chain/Intermediate certificate using Java Keytool utility ?


To install the L1K Entrust Intermediate Certificate, complete the following steps:

  1. In order to install the intermediate certificates into the keystore, you need to download two intermediate certificate files from Entrust certificate pickup link. These files are L1K Intermediate certificate (default file name: Intermediate1.crt) and G2 Cross certificate (default file name : Intermediate2.crt).

Note : Do not use the same alias name as you used to create the certificate signing request. You can create your own alias for both chain installation below or follow the recommended alias name from the instruction on step 2 and 3.

  1. Using the keytool utility, enter the following to install L1K Intermediate1 and G2 Cross certificate Intermediate2:

keytool -import -alias Intermediate2 –keystore < your_keystore_filename> -trustcacerts –file < filename_of_the_Intermediate2>


  1. After the Intermediate2.crt installed successfully, continue following to install L1K Intermediate1 certificate:

keytool -import -alias Intermediate1 –keystore < your_keystore_filename> -trustcacerts –file < filename_of_the_Intermediate1>


  1. You should receive the message Certificate was added to keystore at the end of  step 2 and 3 if you have installed the certificate correctly.  To view the content  of your keystore file, you can run the command below:


Keytool –list –verbose –keystore <your_keystore_filename>

Chat Now