title: How to remove the self-signed root from tomcat 6 server?
body: <p>I have a geotrust extended validation SSL certificate. The server is tomcat 6.
  I did the following things:</p>
  <p>1 - Generate key store file</p>
  <pre><code>keytool -genkey -alias -keyalg RSA -keysize 2048 -keystore -sigalg SHA256withRSA
  </code></pre>
  <p>2 - Generate CSR</p>
  <pre><code>keytool -certreq -alias -file -keystore -sigalg SHA256withRSA
  </code></pre>
  <p>3 - Import downloaded p7b file provided by Symantec against CSR and imported the certificate</p>
  <pre><code>keytool -import -alias -trustcacerts -file -keystore
  </code></pre>
  <p>Everything works fine but Symantec's SSL toolbox is showing following warning</p>
  <h2>Recommendations: Root installed on the server. For best practices, remove the self-signed root from the server.</h2>
  <p>Any ideas how can I remove Root from Server to avoid this warning?</p>