Install a certificate in the Java store

Use the GetCertificate tool to install the PI SQL Data Access Server (RTQP Engine) certificate in the Java store. The GetCertificate tool adds the certificate to the Java Runtime store that is running it.

Every Java Runtime has its own certificate store (cacerts), located under <Java_Path>\lib\security. Some applications also bundle Java Runtime. If you add the certificate to the Java 8 store, but run an application that uses Java Runtime 9 while using trusted servers, the connection will fail because the certificate is not in the correct store.

The GetCertificate tool does not remove certificates. Use the Java keytool.exe to remove unwanted certificates.

Before you start

Check the version of Java Runtime you are using before beginning this procedure to ensure that you add the certificate to the correct store. See Verify Java version for more information. OSIsoft recommends creating a backup of the cacerts before beginning this procedure.

Procedure

1. Use the Command Prompt window and change the directory to PIHOME\SQL\SQL Client\JDBC\Tools\GetCertificate.

2. Type Java GetCertificate and press Enter.

3. Enter the following parameters.

   • PI Asset Framework Server Name

     The name of the server where PI Asset Framework is installed.

   • PI SQL DAS (RTQP) port number

     The port number for the connection to PI SQL Data Access Server (RTQP Engine).

4. Type Yes to confirm that you want to add the certificate to the store.

5. If you have changed the password for the Java store, enter the password and press Enter.