This article is used as a step in the main article Generate and Install an SSL Certificate. Before importing a signed certificate purchased from Geotrust, you must first follow the procedure below to install their primary and secondary intermediate certificates. If you require Embotics to assist in the installation of a 3rd Party SSL Certificate a Professional Service fee may be applicable.


These instructions are current as of the date of initial publication. Certificate authorities may change their policies and practices at any time without Embotics® having any knowledge of the change. Some vendors may require additional steps such as creating additional keystores or modifying the server.xml file. When in doubt, please contact the support team for the issuing authority for further instructions. GeoTrust Support 1-866-436-8787.


  1. Save the intermediate certificates provided by Geotrust to <INSTALL DIRECTORY>\Embotics\vCommander\jre\bin using the filename GTPCA.cer.
  2. Issue the command keytool -import -trustcacerts -alias GTPCA -file GTPCA.cer -keystore “..\..\tomcat\conf\keystore” -storepass changeit.
  3. Proceed with installing the signed CA certificate provided by Geotrust as described in Generate and Install an SSL Certificate.


Download the Geotrust certificate required by this article here.