Follow the steps in Section 5.7.3, “Creating Suitable Certificates” to create the TLS certificate.

Update your configuration to specify these certificates and the keystore password:

shell> tools/tpm configure SERVICE \
    --java-tls-keystore-path=/etc/tungsten/tls.jks \
    --java-keystore-password=mykeystorepass