Ask Different is a question and answer site for power users of Apple hardware and software. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Yesterday I upgraded my Mac to Mac OS X 10.8.4, along with it came an update of the Java JRE (version 1.6.0_45). I want to add a certain CA to the list of trusted CAs by issuing

sudo keytool -keystore /System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Home/lib/security/cacerts -alias mycertificate -import -file the-ca-certificate.der

I am prompted to enter the keystore password. Until the day before yesterday the default keystore password was "changeit", but now "changeit" won't work anymore. I tried to find information about the changed default password with google, but no success.

Does someone of you know the new default password for the system wide Java keystore on Mac OS X 10.8.4 with Java 1.6.0_45?

share|improve this question

migrated from Jun 11 '13 at 10:52

This question came from our site for system and network administrators.

Why was this question downvoted? Adding a CA certificate to the system wide keystore is a legitimate way of trusting a custom CA. – Thomas Wana Jun 11 '13 at 9:52
A guess might be that this question appears to have nothing to do with professional systems administration; instead it appears you are talking about your personal computer. Which is not on-topic according to the faq. – Jenny D Jun 11 '13 at 10:03
On my Mac (10.8.4, Java 1.6.0_45) the password is "changeit". Unlikely, but could it be that keytool requests the CA certificate password instead? In any case you can recover cacerts from backup... – jaume Jun 11 '13 at 12:01
Thanks, I somehow managed to corrupt the keystore file. Restoring it from backup did the trick. – Thomas Wana Jun 24 '13 at 7:21
up vote 2 down vote accepted

Somehow I managed to corrupt the keystore file. Restoring it from backup did the trick.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.