Keystores and certificates collection

Keystores and certificates collection

To manage keystore types, including cryptography, Resource Access Control Facility (RACF) , Certificate Management Services (CMS), Java™, and all trust store types.
To view this admin console page, click Security > SSL certificate and key management. Under Configuration settings, click Manage endpoint security configurations > {Inbound | Outbound} > ssl_configuration. Under Related items, click Keystores and certificates.

Table 1. Keystores and certificates buttons

Button Resulting action
New Adds a new keystore object that can be referenced by SSL configurations or KeySets. The Keystore management scope is based on the part of the topology tree from which it was created.
Delete Deletes an existing keystore. The keystore should not be referenced by any other parts of the configuration before you delete it.
Change password Allows for changing a keystore password.
Exchange signers Refers to exchanging signers in a keystore. We can select two keystores, along with personal certificates or signer certificates from a selected keystore, then add them as a signer to another selected keystore.

Keystore usages

Filters the keystore usage types in the keystore collection.
The default value for the keystore usage filter depends on the navigation path that you followed to get to the Keystores and certificates panel. We can change the value of the keystore usage filter by clicking on the drop-down list and selecting a different filter value.

Navigation path Keystore usage default value
Security > Global security > Administrative authentication > Manage admin keystore > Keystores and certificates RSA token keystores
Security > SSL certificate and key management > Keystores and certificates SSL keystores
Security > SSL certificate and key management > Key sets > CellLTPAKeyPair > Keystores and certificates Key set keystores
Security > SSL certificate and key management > SSL configurations > CellDefaultSSLSettings > Keystores and certificates SSL keystores
Security > SSL certificate and key management > Manage endpoint security configurations > node name > Keystores and certificates SSL keystores

Name

Unique name used to identify the keystore. This name is typically scoped by the ManagementScope scopeName and based upon the location of the keystore. The name must be unique within the existing keystore collection.
This is a user-defined name.

Description

Description of the keystore.
This is a user-defined description.

Path

Location of the keystore file in the format needed by the keystore type. This file can be a card-specific configuration file for cryptographic devices or a filename or file URL for file-based keystores. It can be a safkeyring URL for RACF keyrings.

Related tasks

Create an SSL configuration

Related

Key store settings
Keystores and certificates exchange signers

Button	Resulting action
New	Adds a new keystore object that can be referenced by SSL configurations or KeySets. The Keystore management scope is based on the part of the topology tree from which it was created.
Delete	Deletes an existing keystore. The keystore should not be referenced by any other parts of the configuration before you delete it.
Change password	Allows for changing a keystore password.
Exchange signers	Refers to exchanging signers in a keystore. We can select two keystores, along with personal certificates or signer certificates from a selected keystore, then add them as a signer to another selected keystore.

Navigation path	Keystore usage default value
Security > Global security > Administrative authentication > Manage admin keystore > Keystores and certificates	RSA token keystores
Security > SSL certificate and key management > Keystores and certificates	SSL keystores
Security > SSL certificate and key management > Key sets > CellLTPAKeyPair > Keystores and certificates	Key set keystores
Security > SSL certificate and key management > SSL configurations > CellDefaultSSLSettings > Keystores and certificates	SSL keystores
Security > SSL certificate and key management > Manage endpoint security configurations > node name > Keystores and certificates	SSL keystores