Command Summary

dnf -y update

To update system packages.

dnf -y install java-17-openjdk java-17-openjdk-devel

To install OpenJDK 17.

useradd tomcat

To create a non-root Tomcat user.

mkdir -p /opt/tomcat

To create a Tomcat installation directory.

tar -xvf apache-tomcat-11.0.21.tar.gz -C /opt/tomcat --strip-components=1

To extract Tomcat binaries.

chown -R tomcat:tomcat /opt/tomcat

To set ownership to a Tomcat user.

chmod +x /opt/tomcat/bin/*.sh

To allow execution of Tomcat scripts.

mkdir -p /opt/utimaco/bin /opt/utimaco/lib

To create Utimaco directories.

cp libcs_pkcs11_R3.so /opt/utimaco/lib

To ready Place PKCS#11 library.

vi /etc/utimaco/pkcs11.cfg

To configure the PKCS#11 provider.

cd /usr/lib/jvm/java-17-openjdk/conf/security

To navigate to the java.security location.

keytool -genkey -keyalg RSA -keystore NONE -storetype PKCS11

To generate an RSA key in the HSM.

keytool -genkey -keyalg EC -keystore NONE -storetype PKCS11

To generate an EC key in the HSM.

keytool -certreq -keystore NONE -storetype PKCS11

To generate a certificate signing request.

keytool -importcert -keystore NONE -storetype PKCS11

To import a signed certificate.

systemctl restart tomcat

To restart the Tomcat service.