Hi, i found a solution. #i copy the system trustore cp /etc/pki/java/cacerts $keycloak_cert_path/ #Then i import the new ca in the trustore copy keytool -importcert -file $path_to_cert -keystore $keycloak_cert_path/cacerts -alias "manual-self-signed" -noprompt -storepass $mypassword #then i add the option for starting the JVM ./standalone.sh -b $listening_address *-Djavax.net.ssl.trustStore=$keycloak_cert_path/cacerts -Djavax.net.ssl.trustStorePassword=**$mypassword "* issue : if the system trustore is updated : this trick wont work. Where should i put this trick so nobody with google have to loose 2 days on this ? On Fri, Sep 14, 2018 at 3:18 PM triton oidc <triton.oidc(a)gmail.com&gt; wrote: