Creating a Keystore and Truststore

Keystores and truststores are files that function as repositories for storage of keys and certificates necessary for SSL authentication, encryption/decryption, and digital signing/verification services. Keystores and truststores provide added layers of security and ease of administration, compared to maintaining the keys and certificates in separate files.

You will use your certificate management tools to do the following:

Create at least one keystore, in JKS or PKCS12 format, containing an Integration Server key pair to use for SSL and its corresponding key alias.

Create at least one truststore, in JKS format, containing the trusted root certificate of the signing CA (and certificate chain, if necessary) of the server key pair.

Create a keystore and a truststore alias.

For information about using Integration Server with keystores and truststores and how to create aliases for these files, see Using Keystores and Truststores with Integration Server.

For information about creating keystores and truststores, importing keys and certificates into keystores and truststores, and other operations with these files, refer to the documentation for your certificate management tool.