<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <p>Hi,</p>
    <p>this is JVM option, not a command line command.</p>
    <p>You need to provide that in the same way as the other JVM
      parameter are passed to midPoint.</p>
    <p><br>
    </p>
    <p>If you are using standalone midPoint, you can do this:</p>
    <p>1. create <midpoint>/bin/setenv.sh file (<midpoint>
      is the directory where midPoint is installed)</p>
    <p>2. set the JAVA_OPTS variable inside that file:</p>
    <p>#!/bin/sh<br>
      <br>
      export JAVA_OPTS="$JAVA_OPTS -D.................."</p>
    <p><br>
    </p>
    <p>3. make the file executable: chmod 755 setenv.sh</p>
    <p>4. start midPoint</p>
    <p><br>
    </p>
    <p>This is mentioned also here:
      <a class="moz-txt-link-freetext" href="https://wiki.evolveum.com/display/midPoint/Installing+MidPoint+Server">https://wiki.evolveum.com/display/midPoint/Installing+MidPoint+Server</a><br>
    </p>
    <p><br>
    </p>
    <p>I'm using this to set additional JAVA_OPTS, but have not
      overriden the keystore location.</p>
    <p><br>
    </p>
    <p>Best regards,</p>
    <p>Ivan<br>
    </p>
    <p><br>
    </p>
    <div class="moz-cite-prefix">On 14. 11. 2018 12:03, Parttimaa Jan
      wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:AM6PR0302MB3461D085EBDFF8DC971967019EC30@AM6PR0302MB3461.eurprd03.prod.outlook.com">
      <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
      <style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
      <div id="divtagdefaultwrapper"
style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;"
        dir="ltr">
        <p style="margin-top:0;margin-bottom:0">Hi,</p>
        <p style="margin-top:0;margin-bottom:0"><br>
        </p>
        <p style="margin-top:0;margin-bottom:0">Does anyone
          successfully <span><a
              href="https://wiki.evolveum.com/display/midPoint/Keystore+Configuration"
              class="OWAAutoLink" id="LPlnk878588" previewremoved="true"
              moz-do-not-send="true">override the default JVM
              keystore/truststore location and point it to the midPoint
              keystore</a>? We tried to do that but we have problems.</span></p>
        <p style="margin-top:0;margin-bottom:0"><span><br>
          </span></p>
        <p style="margin-top:0;margin-bottom:0"><span>We tried this...</span></p>
        <p style="margin-top:0;margin-bottom:0"><span><br>
          </span></p>
        <p style="margin-top:0;margin-bottom:0"><span></span></p>
        <div><i><span style="background-color: rgb(255, 255, 0);">root@MIDPOINTIDM:/usr/lib/jvm/java-8-openjdk-amd64/jre/lib/security#
-Djavax.net.ssl.trustStore=/opt/midpoint/var/keystore.jceks
              -Djavax.net.ssl.trustStoreType=jceks</span></i></div>
        <div><i>bash:
            -Djavax.net.ssl.trustStore=/opt/midpoint/var/keystore.jceks:
            No such file or directory</i></div>
        <br>
        <p style="margin-top:0;margin-bottom:0"><span>...but it's says
            that location does not exist, even it does.</span></p>
        <p style="margin-top:0;margin-bottom:0"><span><br>
          </span></p>
        <p style="margin-top:0;margin-bottom:0"><span>We also tried
            this...</span></p>
        <p style="margin-top:0;margin-bottom:0"><span><br>
          </span></p>
        <p style="margin-top:0;margin-bottom:0"><span></span></p>
        <div><i><span style="background-color: rgb(255, 255, 0);">r</span><span
              style="background-color: rgb(255, 255, 0);">oot@MIDPOINTIDM:/usr/lib/jvm/java-8-openjdk-amd64/jre/lib/security#
              java
              -Djavax.net.ssl.trustStore=/opt/midpoint/var/keystore.jceks
              -Djavax.net.ssl.trustStoreType=jceks</span></i></div>
        <div><i>Usage: java [-options] class [args...]</i></div>
        <div><i>           (to execute a class)</i></div>
        <div><i>   or  java [-options] -jar jarfile [args...]</i></div>
        <div><i>           (to execute a jar file)</i></div>
        <div><i>where options include:</i></div>
        <div><i>    -d32          use a 32-bit data model if available</i></div>
        <div><i>    -d64          use a 64-bit data model if available</i></div>
        <div><i>    -server       to select the "server" VM</i></div>
        <div><i>    -zero         to select the "zero" VM</i></div>
        <div><i>    -dcevm        to select the "dcevm" VM</i></div>
        <div><i>                  The default VM is server,</i></div>
        <div><i>                  because you are running on a
            server-class machine.<span style="background-color: rgb(255,
              255, 0);"></span></i></div>
        <div><i><br>
          </i></div>
        <div><i><br>
          </i></div>
        <div><i>    -cp <class search path of directories and zip/jar
            files></i></div>
        <div><i>    -classpath <class search path of directories and
            zip/jar files></i></div>
        <div><i>                  A : separated list of directories, JAR
            archives,</i></div>
        <div><i>                  and ZIP archives to search for class
            files.</i></div>
        <div><i>    -D<name>=<value></i></div>
        <div><i>                  set a system property</i></div>
        <div><i>    -verbose:[class|gc|jni]</i></div>
        <div><i>                  enable verbose output</i></div>
        <div><i>    -version      print product version and exit</i></div>
        <div><i>    -version:<value></i></div>
        <div><i>                  Warning: this feature is deprecated
            and will be removed</i></div>
        <div><i>                  in a future release.</i></div>
        <div><i>                  require the specified version to run</i></div>
        <div><i>    -showversion  print product version and continue</i></div>
        <div><i>    -jre-restrict-search | -no-jre-restrict-search</i></div>
        <div><i>                  Warning: this feature is deprecated
            and will be removed</i></div>
        <div><i>                  in a future release.</i></div>
        <div><i>                  include/exclude user private JREs in
            the version search</i></div>
        <div><i>    -? -help      print this help message</i></div>
        <div><i>    -X            print help on non-standard options</i></div>
        <div><i>    -ea[:<packagename>...|:<classname>]</i></div>
        <div><i>   
            -enableassertions[:<packagename>...|:<classname>]</i></div>
        <div><i>                  enable assertions with specified
            granularity</i></div>
        <div><i>    -da[:<packagename>...|:<classname>]</i></div>
        <div><i>   
            -disableassertions[:<packagename>...|:<classname>]</i></div>
        <div><i>                  disable assertions with specified
            granularity</i></div>
        <div><i>    -esa | -enablesystemassertions</i></div>
        <div><i>                  enable system assertions</i></div>
        <div><i>    -dsa | -disablesystemassertions</i></div>
        <div><i>                  disable system assertions</i></div>
        <div><i>    -agentlib:<libname>[=<options>]</i></div>
        <div><i>                  load native agent library
            <libname>, e.g. -agentlib:hprof</i></div>
        <div><i>                  see also, -agentlib:jdwp=help and
            -agentlib:hprof=help</i></div>
        <div><i>    -agentpath:<pathname>[=<options>]</i></div>
        <div><i>                  load native agent library by full
            pathname</i></div>
        <div><i>    -javaagent:<jarpath>[=<options>]</i></div>
        <div><i>                  load Java programming language agent,
            see java.lang.instrument</i></div>
        <div><i>    -splash:<imagepath></i></div>
        <div><i>                  show splash screen with specified
            image</i></div>
        <div><i>See
            <a class="moz-txt-link-freetext" href="http://www.oracle.com/technetwork/java/javase/documentation/index.html">http://www.oracle.com/technetwork/java/javase/documentation/index.html</a>
            for more details.</i></div>
        <br>
        <p style="margin-top:0;margin-bottom:0"><span>... but we only
            got Java help.</span></p>
        <p style="margin-top:0;margin-bottom:0"><span><br>
          </span></p>
        <p style="margin-top:0;margin-bottom:0"><span>We have <span>openjdk-8-jre
              and openjdk-8-jdk installed on our Ubuntu Server 16.04.5
              LTS (64-bit). We use MidPoint 3.8.</span></span></p>
        <p style="margin-top:0;margin-bottom:0"><span><span><br>
            </span></span></p>
        <p style="margin-top:0;margin-bottom:0"><span><span>Best
              Regards,</span></span></p>
        <p style="margin-top:0;margin-bottom:0"><span><span>Jan
              Parttimaa</span></span></p>
        <p style="margin-top:0;margin-bottom:0"><br>
        </p>
        <div id="Signature">
          <div id="divtagdefaultwrapper" dir="ltr" style="color: rgb(0,
            0, 0); font-family: Calibri, Arial, Helvetica, sans-serif,
            EmojiFont, "Apple Color Emoji", "Segoe UI
            Emoji", NotoColorEmoji, "Segoe UI Symbol",
            "Android Emoji", EmojiSymbols; font-size: 12pt;
            background-color: rgb(255, 255, 255);">
            <p><span style="color:rgb(0,0,0)"><i><span
                    style="font-family:Calibri,Arial,Helvetica,sans-serif">Jan
                    Parttimaa</span></i></span></p>
            <span style="font-family:Calibri,Arial,Helvetica,sans-serif"></span><span
              style="color:rgb(0,0,0)"></span><span
              style="font-family:Calibri,Arial,Helvetica,sans-serif"></span>
            <p><span style="color:rgb(0,0,0)"><i><span
                    style="font-family:Calibri,Arial,Helvetica,sans-serif">1602738,</span></i></span></p>
            <span style="font-family:Calibri,Arial,Helvetica,sans-serif"></span><span
              style="color:rgb(0,0,0)"></span><span
              style="font-family:Calibri,Arial,Helvetica,sans-serif"></span>
            <p><span style="color:rgb(0,0,0)"><i><span
                    style="font-family:Calibri,Arial,Helvetica,sans-serif">Tietojenkäsittelyn
                    koulutusohjelma,</span></i></span></p>
            <span style="font-family:Calibri,Arial,Helvetica,sans-serif"></span><span
              style="color:rgb(0,0,0)"></span><span
              style="font-family:Calibri,Arial,Helvetica,sans-serif"></span>
            <p><span style="color:rgb(0,0,0)"><i><span
                    style="font-family:Calibri,Arial,Helvetica,sans-serif">Haaga-Helia
                    ammattikorkeakoulu</span><span
                    style="font-family:Calibri,Arial,Helvetica,sans-serif"></span><span
style="font-family:Calibri,Arial,Helvetica,sans-serif">, Pasilan kampus</span></i></span></p>
          </div>
        </div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <pre class="moz-quote-pre" wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
    </blockquote>
    <pre class="moz-signature" cols="72">-- 
Ivan Noris
Senior Identity Engineer
evolveum.com
</pre>
  </body>
</html>