...

Danach ist das neue Keypair im Keystore eingelagert und der diag server kann damit gestartet werden.

Further information:

...

Appendix: Satellite system sync with HTTPs

If you set up a satellite system the Apache Tomcat server will not act as a server, but as a client.

In this case Apache Tomcat will not use the server key store (keystore,jks) in the diagserverdata directory, but its client keystore cacerts (by default stored in (C:\Program Files\custo diagnostic server\jre\lib\security). You can use the same tools as above to open that certificate store - the password is by default empty. Import the root certificate of the SSL certificate installed on the master server.

Now you need to configure Apache Tomcat to use its own keystore and not the one of the Windows operating system. For this open the "Configure custo diagnostic server" app on the SAT server and go to the Java tab. Remove the line "-Djavax.net.ssl.trustStoreType=WINDOWS-ROOT" and restart the custo diagnostic SAT server.

Further information:

See also Tomcat HTTP / SSL Howto: https://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html man den CSR erstellen, aber auch die CA-Antwort importieren.