The default password for the Java trusted keystore file is "changeit",  
**Add server Certificate**  
D:\ColdFusion11\jdk1.8.0_172\bin\keytool -import -file D:\ColdFusion11\jdk1.8.0_172\lib\security\tnwg01a-p0657.cer -keystore D:\ColdFusion11\jdk1.8.0_172\lib\security\cacerts -alias ADEX
 
**Import Treasury Root CA**  
D:\ColdFusion11\jdk1.8.0_172\bin\keytool -import -file D:\ColdFusion11\jdk1.8.0_172\lib\security\ustreas.cer -keystore D:\ColdFusion11\jdk1.8.0_172\lib\security\cacerts -alias "US Treasury Root CA"
 
**View/List certificates**  
D:\ColdFusion11\jdk1.8.0_172\bin\keytool -list -v -keystore D:\ColdFusion11\jdk1.8.0_172\lib\security\cacerts
 
**Delete Certificate**  
D:\ColdFusion11\jdk1.8.0_172\bin\keytool -delete -v -keystore D:\ColdFusion11\jdk1.8.0_172\lib\security\cacerts -alias "US Treasury Root CA"
 
D:\ColdFusion11\jdk1.8.0_172\bin\keytool -delete -v -keystore D:\ColdFusion11\jdk1.8.0_172\lib\security\cacerts -alias "US Treasury Root CA"
   

**JRE configuration is stored in** D:\ColdFusion11\cfusion\bin\jvm config
    
Workstation  
"C:\Program Files\Java\jre1.8.0_191\bin\keytool.exe" -import -file c:\temp\ustreas.cer -keystore "C:\Program Files\Java\jre1.8.0_191\lib\security\cacerts" -alias "US Treasury Root CA"
 
The default server password is **changeit**.
 \> From \<[https://www.bing.com/search?q=keystore+default+password&qs=AS&pq=keystore+default&sc=8-16&cvid=79E6BDBBFB674320A6456ADEC0F6312F&FORM=QBRE&sp=1](https://www.bing.com/search?q=keystore+default+password&qs=AS&pq=keystore+default&sc=8-16&cvid=79E6BDBBFB674320A6456ADEC0F6312F&FORM=QBRE&sp=1)\>     

keytool.exe -list -v -keystore D:\ColdFusion2018\jre\lib\security\cacerts
 
Tnwg01a-v2223 ColdFusion2018  
"D:\ColdFusion2018\jre\bin\keytool.exe" -import -file c:\temp\fcpcag2.crt -keystore "D:\ColdFusion2018\jre\lib\security\cacerts" -alias "Federal Common Policy CA G2"  
"D:\ColdFusion2018\jre\bin\keytool.exe" -import -file c:\temp\US_Treasury_Root_CA.cer -keystore "D:\ColdFusion2018\jre\lib\security\cacerts" -alias "US Treasury Root CA G2"  
"D:\ColdFusion2018\jre\bin\keytool.exe" -import -file c:\temp\treas.cer -keystore "D:\ColdFusion2018\jre\lib\security\cacerts" -alias "US Treasury Root"
 
D:\ColdFusion2018\jre\bin\keytool.exe -list -v -keystore D:\ColdFusion2018\jre\lib\security\cacerts
 
keytool -delete -v -keystore D:\ColdFusion2018\jre\lib\security\cacerts -alias "US Treasury Root CA" -storepass changeit  
keytool -importcert -alias giveUniqueName -trustcacerts -file filename.cer -keystore cacerts -storepass thePassword
 \> From \<[https://stackoverflow.com/questions/13863292/import-certificate-for-coldfusion10](https://stackoverflow.com/questions/13863292/import-certificate-for-coldfusion10)\>   
keytool -delete -v -keystore D:\ColdFusion2018\jre\lib\security\cacerts -alias "dhs ca4" -storepass changeit
 
cbp-edme-npe-ca3  
us treasury root ca  
dhs ca4