Here are the steps to install SSL in tomcat. 1. Create a key pair keytool -keysize 2048 -genkey -alias <pick a name> -keyalg RSA -keystore tomcat.keystore default password, if not changed, is changeit First and last name - type your website url, for example, www.company.com Organizational unit - for example, engineering, production etc. Organization - full name of your company City/Locality - name of the city State/Province - name of state Country code - two letter country code. refer to this site type yes to confirm and press ENTER when asked for a password for private key, select same password as the keystore otherwise you will run into this bug #38217 at the time of installation 2. Generate a certificate request (CSR) keytool -certreq -keyalg RSA -alias <your alias> -file <your company name> .csr -keystore tomcat.keystore 3. Copy/paste the entire content of .csr and follow the steps described by your certificate provider, for example godaddy etc, to submit