Adds the specified certificate to a target domain truststore.


asadmin add-to-truststore [--help]


This command adds a certificate (e.g. .cer/.pem file) to the target instance or listener’s trust store or listener’s trust store using the provided alias.

If the instance or listener is configured to use the default trust store, the command will instead synchronize the instance with the DAS (under the assumption the certificate has been added to the default trust store of the DAS), since any certificates added to the instance stores would be lost upon next synchronisation.

This will overwrite an entry already present with the same alias.



Displays the help text for the subcommand.


This option helps specify the target on which you are adding the certificate. Valid values are:


Applies to the default server instance. This is the default value.


Applies to every server instance in the cluster.


Applies to a specified sever instance.


Whether the HTTP listeners should be reloaded. Defaults to false


The name of the HTTP or IIOP listener to add the certificate to.


The name of the domain where the target instance exists.

Defaults to domain1 or the existing domain if only one exists.


The path to the directory containing the target domain.

Defaults to as-install/glassfish/domains


The name of the node where the target instance exists.

Defaults to localhost-$domainname


The path to the directory containing the target node.

Defaults to as-install/glassfish/nodes


The certificate file to add to the target truststore.



The alias name to store the certificate in the truststore under.


Example 1 Add the specified certificate under the mycert alias

asadmin add-to-truststore --file mycert.pem mycert

Exit Status


subcommand executed successfully


error in executing the subcommand

See Also