# Public keys in reply and keystore don't match

**URL:** <https://forum.inductiveautomation.com/t/public-keys-in-reply-and-keystore-dont-match/9944>\
**Category:** Ignition\
**Created:** [April 22, 2015, 1:40pm UTC](https://forum.inductiveautomation.com/t/public-keys-in-reply-and-keystore-dont-match/9944 "2015-04-22T13:40:36Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hillbird](https://avatars.discourse-cdn.com/v4/letter/h/41988e/32.png) [@Hillbird](https://forum.inductiveautomation.com/u/Hillbird)\
**Post date:** [April 22, 2015, 1:40pm UTC](https://forum.inductiveautomation.com/t/public-keys-in-reply-and-keystore-dont-match/9944/1 "2015-04-22T13:40:36Z")

</div>

error: Public keys in reply and keystore don’t match  
SSL on 7.7.4 installation

Hello,

I followed instructions on [support.inductiveautomation.com … l\_cert.htm](https://support.inductiveautomation.com/usermanuals/ignition/index.html?installing_genuine_ssl_cert.htm)

Here a log of the commands:  
C:\Program Files\Java\jdk1.8.0\_20\bin\>keytool -genkey -alias tomcat -keyalg RSA  
-keysize 2048 -keystore d:\ssl.key  
Enter keystore password:  
Re-enter new password:  
What is your first and last name?  
[Unknown]: [test.poninsight.com](http://test.poninsight.com)  
What is the name of your organizational unit?  
[Unknown]: PEPP  
What is the name of your organization?  
[Unknown]: Pon IT  
What is the name of your City or Locality?  
[Unknown]: Amsterdam  
What is the name of your State or Province?  
[Unknown]: Noord-Holland  
What is the two-letter country code for this unit?  
[Unknown]: NL  
Is [CN=test.poninsight.com](http://CN=test.poninsight.com), OU=PEPP, O=Pon IT, L=Amsterdam, ST=Noord-Holland, C=N  
L correct?  
[no]: yes

Enter key password for   
(RETURN if same as keystore password):

C:\Program Files\Java\jdk1.8.0\_20\bin\>keytool -import -trustcacerts -alias root  
-file C:\Temp\AddTrustExternalCARoot.crt -keystore d:\ssl.key  
Enter keystore password:  
Certificate already exists in system-wide CA keystore under alias   
Do you still want to add it to your own keystore? [no]: no  
Certificate was not added to keystore

C:\Program Files\Java\jdk1.8.0\_20\bin\>keytool -import -trustcacerts -alias INTER  
-file C:\Temp\PositiveSSLCA2.crt -keystore d:\ssl.key  
Enter keystore password:  
Certificate was added to keystore

C:\Program Files\Java\jdk1.8.0\_20\bin\>keytool -import -trustcacerts -alias tomca  
t -file C:\Temp\test\_poninsight\_com.crt -keystore d:\ssl.key  
Enter keystore password:  
Keystore password is too short - must be at least 6 characters  
Enter keystore password:  
keytool error: java.lang.Exception: Public keys in reply and keystore don’t matc  
h

C:\Program Files\Java\jdk1.8.0\_20\bin\>

how can I solve this?