The keytool command is a key and certificate management utility included with the Java Runtime Environment (JRE) and Java Development Kit (JDK). Cisco Contact Center Enterprise (CCE) and its components (like Finesse, CCE Administration, and others) are built on Java and utilize Java Keystores (.jks or cacerts files) to store and trust security certificates. Therefore, keytool is the standard, officially documented command-line tool used on the underlying Windows servers to manage these certificates, including importing, exporting, and listing them within the required Java Keystores.

A. PROCMON: Process Monitor (Procmon) is a Windows Sysinternals diagnostic tool for monitoring file system and registry activity; it does not manage certificates.

B. OPENSSL: While OpenSSL is a certificate management tool, keytool is the native and specific utility required to manage certificates directly within the Java Keystore format used by CCE components.

C. System CLI: This is a generic term for the command-line interface shell (e.g., cmd.exe or PowerShell), not the specific command used for certificate management.

1. Cisco Unified Contact Center Enterprise Installation and Upgrade Guide

Release 12.5(1)

"Security Certificates" chapter

"Import Root and Intermediate Certificates of New CA into Keystores" section. This guide explicitly details the use of the keytool command to import certificates into the Java cacerts keystore for various CCE components. For example

it provides the command: keytool -import -trustcacerts -alias -file -keystore .

2. Security Guide for Cisco Unified ICM/Contact Center Enterprise

Release 12.0(1)

"Transport Layer Security" chapter

"Third-Party CA-Signed Certificates" section. This document describes the procedure for obtaining and importing third-party CA-signed certificates

specifying the use of keytool to import the root and intermediate certificates into the Java truststore on CCE servers.

3. Oracle Java Documentation

"keytool - Key and Certificate Management Tool". The official Java documentation defines keytool as the primary command-line utility for administering a keystore (database) of cryptographic keys

X.509 certificate chains

and trusted certificates. This is the foundational technology used by Cisco CCE. (Refer to the official Oracle documentation for the specific Java version deployed with CCE).