Getting PCNS to work with a Microsoft ADCS signed certificate

[alx9r_apc]

This was originally posted on APC forums on 2/24/2014

---

Knowledge-base article FA176886 is entitled "Replacing the Self-Signed SSL Certificate in PowerChute Network Shutdown v3.1.  You can find that article here: http://www2.schneider-electric.com/resources/sites/SCHNEIDER_ELECTRIC/content/live/FAQS/176000/FA176...

I'm setting up a site that uses Microsoft Active Directory Certificate Services as its internal certificate authority.  APC's PowerChute Network Shutdown uses a java keystore and keytool.exe to manage its keys and certificates.  For some reason, keytool.exe has troubles chaining MS ADCS certificates.  As a result, I get the following error when executing step 4 in the section "Import the Root CA and Web Server SSL certs to the PowerChute Keystore."

keytool error: java.lang.Exception:Incomplete certificate chain in reply

The solution involves using an alternative tool called KeyStore Explorer instead of keytool.exe to manipulate the keystore.  There are some specifics to be aware of.  See this stackoverflow Q&A for the details:

https://stackoverflow.com/questions/21958654/what-do-i-do-when-keytool-exe-cant-establish-a-certific...

[BillP · Accepted solution]

This reply was originally posted by Bill on APC forums on 2/25/2014

---

Thanks for the information.