Creating an SSO Wallet and JKS for CA Certificates

You can create a single sign-on (SSO) wallet and Java Keystore (JKS) for certificates issued by an external Certificate Authority for use with your Always-On Monitoring environment. To do so, perform the following:

Copy the EM key from the Enterprise Manager repository by running:
```
emctl config emkey -copy_to_repos
```
Generate the certificate and the wallet for the host by running:
```
$AOM_HOME/bin/emsctl secure
```

If a certificate is issued by a third-party Certificate Authority, then you need to store the certificate in the wallet. Once the wallet has the certificate, you must run the following:

$AOM_HOME/bin/emsctl secure -wallet=<absolute location of the wallet file>