Keys and Certificates

Keystores and truststores are files that function as repositories for storage of keys and certificates necessary for SSL authentication, encryption/decryption, and digital signing/verification services. Keystores and truststores provide added layers of security and ease of administration, compared to maintaining the keys and certificates in separate files.

Integration Cloud stores its private keys and SSL certificates in keystore files and the trusted roots for the certificates in truststore files. Keystores and truststores are secure files with industry-standard file formats.

If you want to run services that submit HTTPS requests to other resources on the Internet, your server will be acting as a client and will receive certificates from these resources. In order for these transactions to work, your server must have copies of their public keys and signing CA certificates.

To identify a particular keystore or truststore file, or private key within a keystore, aliases are used. The use of aliases simplifies keystore and truststore management, because you do not need to enter path information when specifying a keystore, truststore, or the private key.

Note: You can add, edit, or view keystore and truststore aliases and partner’s self-signed certificates from Projects > <Select a Project> > Keys & Certificates and can use them to secure your Application Accounts. Some Applications, including custom REST Applications allow two-way SSL authentication by providing keystore and truststore aliases in the Account Configuration section. Users who have the Administer permission under Settings

> Access Profiles > Administrative Permissions > Functional Controls > Advanced Security can add, edit, and delete Keystores, Truststores, and Partner Certificates.

To add a Keystore, from the Integration Cloud navigation bar, click Projects > <Select a Project> > Keys & Certificates > Keystores > Add Keystore.

To add a Truststore, from the Integration Cloud navigation bar, click Projects > <Select a Project> > Keys & Certificates > Truststores > Add Truststore.

To add a Partner Certificate, from the Integration Cloud navigation bar, click Projects > <Select a Project> > Keys & Certificates > Partner Certificates > Add Certificate.