Ricoh MFP Java Client Add Server Certificate to Keystore

Issue

How to add a Server SSL certificate or Certificate Authority SSL certificate to the Ricoh Java Client Keystore 

Cause

By default, the Kofax Ricoh MFP Java Client performs Server Certificate Validation to ensure that the certificate provided by the server is the same as the certificate stored in its keystore.

Solution

1. Export the server certificate from IIS or Certificate Management in Base-64 encoded X.509 format (.cer)
    
2. On the Capture share, navigate to \CaptureSV\KFS <version>\
    
3. Create a new folder called externalcerts
    
4. Copy the server certificate into the externalcerts folder
    
5. In the KFS Administration Console's Devices screen, download the Ricoh MFP Client
    
6. Deploy or Install the Ricoh MFP Java Client to the device

To confirm that the certificate has been added to the keystore:

1. Download the Ricoh MFP Client from the KFS Administration Console's Devices screen 
    
2. Unzip the downloaded ricoh.zip package
    
3. Unzip the KofaxRicohClient.zip package
    
4. Open keystore.jar using an application like 7-Zip that can open a .jar package and view its contents
    
5. Open the externalcerts folder in the keystore.jar package
    
6. Note whether the server certificate .cer file is present in the folder

Level of Complexity 

Moderate

Applies to  

References

• Kofax Front Office Server Administrator's Guide for Ricoh MFPs
• 7-zip.org