Add keystore files

A keystore file contains both public keys and private keys. Public keys are stored as signer certificates while private keys are stored in the personal certificates. In WAS, adding keystore files to the configuration is different between client and server. For the client, a keystore file is added to a property file like sas.client.props. For the server, a keystore file is added through the WebSphere Application Server administrative console. Before you add the keystore file to your configuration, consider the following questions...

  1. Add a keystore file into a client configuration by editing the sas.client.props file and setting the following properties:

    • for the keystore format. Range: JKS (default), PKCS12KS, JCEK.

    • for a fully qualified path to the keystore file. The keystore file contains private keys and sometimes public keys.

    • for the password to access the keystore file.

  2. Add a keystore file into a server configuration:

    1. Start the WebSphere administrative console by specifying: http://server_hostname:9090/admin.

    2. Click Security > SSL Configuration Repertoires.

    3. Create a new SSL setting alias if one does not exist.

    4. Select the alias that you want to add into the keystore file.

    5. Type in the Key File Name for the path of the keystore file.

    6. Type in the Key File Password for the password to access the keystore file.

    7. Select the Key File Format for the keystore type. Range... JKS (default), PKCS12KS, or JCEK.

    8. Click OK and Save to save the configuration.

The SSL configuration alias now has a valid keystore file for an SSL connection.

If the Cryptographic Token field is selected and you only want to use cryptographic tokens for your keystore file, leave the Key File Name field and the Key File Password field blank.


Usage Scenario


See Also

Managing digital certificates
Configuring CSIv2 and SAS authentication protocols