[Download] | [Documentation Home] | [Release Note]

WSO2 XKMS Implementation (XKMS 2.0)

Content

Introduction

XML Key Management Service Specification (a.k.a. XKMS) defines a standard way of generating key pairs, storing public key information and retrieving public key information. The XKMS services can be exposed as Web services which allow other applications to delegate some of the key information processing to such services. That allows the client applications of XKMS services to operate without worrying about the Public Key Infrastructure which the XKMS services might be using. XKMS consists of two components. Namely:

Implementation

WS02 XKMS Implementation allows the users to expose a Java key store via the following XKMS operations.

Configuration

The XKMS service can be configured by editing the following parameters for the service.

Enabling WSAS to use an XKMS service

You can configure WSO2 WSAS to use a XKMS server to locate and validate public keys and x509 Certificates when applying WS-Security. You can do this by un-commenting the following parameter in the axis2.xml in the AXIS2_HOME/conf directory.
    	<parameter name="XKMSConfig" enabled="true">
			<URL>http://127.0.0.1:9762/services/xkms</URL>
			<PassPhrase>secret</PassPhrase>
	</parameter>
    
Once it is enabled, the WSAS Crypto implementation will try to use the XKMS service for retrieval or validation purposes as the last resort, if the key or the certificate is not available on local keystores.