(PowerShell) Change Password for Java KeyStore File

Demonstrates how to load a Java keystore, change the password, and save using the new password. If the Java keystore contains only trusted root certificates, then it's simply a matter of loading the JKS with the existing password, and then saving with a new password. If the JKS contains private key entries, then each private key entry must be re-keyed using the new password by calling the ChangePassword method.

Chilkat .NET Downloads Chilkat .NET Assemblies

Add-Type -Path "C:\chilkat\ChilkatDotNet47-9.5.0-x64\ChilkatDotNet47.dll"

# This requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

$jks = New-Object Chilkat.JavaKeyStore

$oldJksPassword = "existingPassword"
$newJksPassword = "newPassword"
$jksPath = "/someDir/keyStore.jks"

# Load the Java keystore from a file.
$success = $jks.LoadFile($oldJksPassword,$jksPath)
if ($success -ne $true) {
    $($jks.LastErrorText)
    exit
}

# If the JKS contains private key entries, then each
# must be re-keyed with the new password by calling ChangePassword.
$numPrivateKeys = $jks.NumPrivateKeys

$i = 0
while ($i -lt $numPrivateKeys) {

    $success = $jks.ChangePassword($i,$oldJksPassword,$newJksPassword)
    if ($success -ne $true) {
        $($jks.LastErrorText)
        exit
    }

    $i = $i + 1
}

# Write the JKS using the new password for the JKS file's keyed digest.
$success = $jks.ToFile($newJksPassword,$jksPath)
if ($success -ne $true) {
    $($jks.LastErrorText)
    exit
}

$("Updated the password for the Java keystore file.")