---
title: Create a Java KeyStore (JKS) file
slug: kronpam-reference-guide-3-5-0/create-a-java-keystore-jks-file
description: Learn how to create a JKS file for Apache Tomcat by converting an existing x509 certificate to the p12 format. This comprehensive guide also covers altering the JKS alias or password to suit your preferences. Simplify the process with step-by-step instruc
docTags: 
createdAt: 2022-08-01T11:37:58.000Z
---

To use the certificate with Apache Tomcat, you must create a JKS file. To create a JSK file from an existing x509 certificate:

1. Convert the x509 certificate to the p12 format using the command below. The system will ask you to create an export password after the command. Define a password.
   openssl pkcs12 -export -in \<**company-name.crt>** -inkey **\<company-name.key**> -certfile **\<company-name.crt>** -out **\<company-name.keystore.p12>**
2. Using the new p12 file, run the command below to create the JKS file. The system will ask you to create a destination KeyStore password after the command. Define a password. The system will then ask you for the source KeyStore password, which was created in the previous step as the export password.
   /usr/java/jdk1.8.0\_131/jre/bin/keytool -importkeystore -srckeystore **\<company-name.keystore.p12>** -srcstoretype pkcs12 -destkeystore **\<company-name.jks>** -deststoretype JKS
3. By default, the JKS alias is set as 1. If you want to change the JKS alias or password, use the following commands:
   keytool -changealias -keystore **\<path/to/jks>** -alias&#x20;
   keytool -keypasswd -alias  -keystore **\<path/to/jks>**