Put both the private key and cert in the keystore.
Restart Tomcat after keystore changes.
Import cert without trust attributes.
Restart qpidd when keys change.