On the Server: 1. Generate keys - keytool -genkey -alias server -keyalg RSA -keysize 1024 -validity 9999 -keystore keystores/server.ks 2. Export certificate - keytool -export -alias server -keystore keystores/server.ks -file keystores/exported_server.crt 3. Copy exported_client.crt into keystores on Server machine 4. Import Client certificate - keytool -import -keystore keystores/server.ks -alias client -file keystores/exported_client.crt On the Client: 1. Generate keys - keytool -genkey -alias client -keyalg RSA -keysize 1024 -validity 9999 -keystore keystores/client.ks 2. Export certificate - keytool -export -alias client -keystore keystores/client.ks -file keystores/exported_client.crt 3. Copy exported_server.crt into keystores on Client machine 4. Import Server certificate - keytool -import -keystore keystores/client.ks -alias server -file keystores/exported_server.crt