A Keystore is a collection of certificates and private keys. You can use a Keystore with your security policies and web service consumer activities. Keystore stores your certificates and private keys that you can give to your client. You can create a Keystore either manually or by uploading a Keystore file. To create a Keystore,
- Click Account > Security Settings.
- Click Key Entries tab and do the following:
- If you want to create a Keystore by uploading a Keystore file, click Import. The Import Keystore window appears.
- Click Browse.
- The Open dialog box appears.
- Explore to your PKCS12 or JKS Keystore file type and click Open.
- Provide the Keystore password in the Keystore Passphrase.
- Click Save to create a Keystore.
If you want to create a Keystore manually, click Generate. The Generate Key Pair window appears.
Field Name Description Name Name of the Keystore. Description Description of the Keystore. Keystore Type Type of Keystore file type either PKCS12 or JKS. Keystore Password
Password of the Keystore you want to set.
Confirm Password
Confirm the password of your Keystore.
Private Key Password
Password of your private key that you want to set.
Confirm Password
Confirm the password of your private key.
Alias
A unique name for the identity of the Keystore that you are creating.
Key Algorithm
An algorithm to encrypt your Keystore. You can choose from either DSA or RSA
Key Size
Encryption key size of the encryption algorithm. The minimum size for DSA is 512 and for RSA is 1024 but it is recommended to use an algorithm of at least 1024 and 2048 key size respectively.
Common Name
A unique name to associate with the generated certificate, like a name of a person, for example, "Susan Jones".
Organization Unit
Name of the organization unit where you work.
Organization Name
Name of your organization.
Locality
Locality of your organization.
State
State where your organization is situated.
Country
Country where your organization is located.
Validity
Number of days for which your Keystore will be valid.
Signature Algorithm
An algorithm to encrypt your signature. You can choose from SHA1 with DSA, SHA1 with RSA, MD5 with RSA, and RIPEMD160 with RSA.
- If you want to create a Keystore by uploading a Keystore file, click Import. The Import Keystore window appears.
- The Keystore is created successfully and is displayed on the Key entries screen.