Key Store Management

Keystore management manages the keys that are stored in a database. A Keystore must contain a key pair with a certificate signed by a trusted Certification Authority (CA). The WSO2 Carbon uses the JKS type private key called WSO2 Carbon.

Figure 1: Keystore Management

Adding a New Keystore

WSO2 Carbon keystore management provides the facility to manage multiple keystores. It supports two types of Keystores.

  • JKS (Java Key Store) It can read and store key entries and certificate entries. However, the key entries can store only private keys.
  • PKCS12 (Public Key Cryptography Standards) You can read a keystore in this format and can export the information from that keystore, but you cannot modify the keystore. This is used to import the certificates from different browsers into your Java keystore.
  1. In the navigator, under Configure, click Keystore.
  2. Click on Add New Keystore. The Add New Keystore page appears.
  3. Click Browse to locate the Keystore file you want to add.
  4. Provide the Password, Provider and the Keystore Type.
  5. Click Next.
  6. You will be asked to provide Private key Password.
  7. Click Finish. Key Store Management table.

Note: Keystore management does not let you import an existing private key for which you already have a certificate.

Figure 2: Adding a new keystore