I have a similar problem but, I used a different password to generate the CSR and used the same password to import the CRT file to create .keystore!

Is the "changeit" password a required password or does it just have to be the same as what I used?

The only other issue that might be causing this is the last step:

keytool -import -alias tomcat -keystore .keystore -trustcacerts -file TeamServerCert.crt

This is supposed to generate a response of “Certificate reply was installed in keystore” and in my case it simply said Certificate was added to keystore?