title: Keytool command to add a PasswordCredential to elytron keystore?
body: <p>I'm running a JBOSS EAP 7.3 server and trying to add a private key to the elytron keystore.
  The following works:<br></p>
  <blockquote>
  <p><code>$JBOSS_HOME/bin/jboss-cli.sh --connect --command=/subsystem=elytron/credential-store=keystore:add-alias(alias='keyalias', secret-value='password')</code><br></p>
  </blockquote>
  <p>But the issue here is the password is shown in plain text on the command line. I attempted to manually add the key using the keytool command:<br></p>
  <blockquote>
  <p><code>keytool -importpass -alias 'keyalias' -v -keystore $JBOSS_HOME/keystore.p12 -storetype pkcs12</code><br></p>
  </blockquote>
  <p>Which then prompts me to enter the keystore password and the key as I want, but trying to reference this key in the server results in the following error:<br></p>
  <blockquote>
  <p><code>{ &quot;outcome&quot; =&gt; &quot;failed&quot;, &quot;failure-description&quot; =&gt; {&quot;WFLYCTL0080: Failed services&quot; =&gt; { Caused by: org.jboss.as.controller.OperationFailedException: WFLYELY00920: Credential alias 'keyalias' of credential type 'org.wildfly.security.credential.PasswordCredential' does not exist in the store [ \&quot;WFLYELY00920: Credential alias 'keyalias' of credential type 'org.wildfly.security.credential.PasswordCredential' does not exist in the store\&quot; ]&quot;}}, &quot;rolled-back&quot; =&gt; true, &quot;response-headers&quot; =&gt; {&quot;process-state&quot; =&gt; &quot;reload-required&quot;} }</code></p>
  </blockquote>
  <p>Is it possible to add elytron keys via the keystore tool? Or is it possible to add the key in a way such that the plaintext value isn't exposed on the command line?
  I'm new to JBOSS and having trouble finding resources on this particular topic. Thanks</p>