Audit record keystore settings
The Audit record keystore page is used by an auditor to define the keystores used for storing the encryption certificate used to encrypt the audit records. Keystores used for auditing are managed outside of other keystores being used on the system to facilitate separation of the authority of the auditor for the authority of the administrator.
From the admin console, click one of the following paths:
- Security > Security Auditing > Audit encryption keystores and certificates > keystore_name.
- Security > Security Auditing > Audit encryption keystores and certificates > New.
- Security > Security Auditing > Audit record encryption configuration > New
Name
The Name field specifies the unique name for the keystore. This is a required field.
Path
The path where the keystore file is located. This is a required field.
Password
The password to be used for this keystore. This is a required field.
Confirm Password
Specifies confirmation of the value provided in the Password field. This is a required field.
Type
The Type field specifies the type of the keystore. The Type dropdown menu has the following options for defining the keystore type:
- JCEKS
- CMSKS
- PKCS12 - The default value for the Type field is PKCS12.
- Cryptographic Token Device (PKCS11)
- JKS
- PKCS12JarSigner
Auditing the security infrastructure Security Auditing detail Audit record signing configuration settings Audit record encryption configuration settings Audit encryption keystores and certificates collection