Steps to add Versign certificate in Tomcat server

• Create a Key Pair

keytool -alias <alias_name> -genkey -keyalg "RSA" -keystore <keystore_filename>

• Generate the CSR file from the Key pair created

keytool -certreq -alias <alias_name> -file <csr filename> -keystore <keystore_filename>

• Submit the CSR file to Versign to obtain certificate

• This step is only for Trail SSL certificate
  

• Download root certificate from http://www.verisign.com/support/verisign-intermediate-ca/Trial_Secure_Server_Root/index.html and store has root.cer
• Download intermediate Certificate from http://www.verisign.com/support/verisign-intermediate-ca/trial-secure-server-intermediate/index.html and store has intermediate.cer
• Add root and intermediate Certificate to Key pair
  keytool -import -trustcacerts -alias root -keystore <keystore_filename> -file root.cer
  keytool -import -trustcacerts -alias intermediate -keystore <keystore_filename> -file intermediate.cer

• Download primary and secondary certificate from http://www.verisign.com/support/verisign-intermediate-ca/extended-validation/index.html and store has primary_EV_inter.cer and secondary_EV_inter.cer

keytool -import -trustcacerts -alias EV_root -keystore <keystore_filename> -file primary_EV_inter.cer
keytool -import -trustcacerts -alias EV_intermediate -keystore <keystore_filename> -file secondary_EV_inter.cer

• Store the Certificate obtained from Versign as cert.cer

keytool -import -trustcacerts -alias <alias_name> -keystore <keystore_filename> -file cert.cer

Configuration in Tomcat

Open server.xml in conf folder
Add following node in service node
<connector
className="org.apache.coyote.tomcat4.CoyoteConnector"
port="8443" minProcessors="5" maxProcessors="75"
enableLookups="false" acceptCount="10" SSLEnabled="true"
connectionTimeout="60000" debug="0" scheme="https" secure="true" Protocol="TLS" clientAuth="false"
keyAlias="<alias_name>" keystore="<keystore_filename>"
keystorePass="<password>"/>

NOTE:
Change the port value for desired port
UI to add certificate is available at http://portecle.sourceforge.net/