...
wso2carbon.jks: This keystore contains a key pair , which and is used by default used in your Carbon server for all of the purposes explained above.client-truststore.jks: This is the default trust store, which contains the trusted certificates of the keystore used in SSL communication.
...
WSO2 products provide the facility to add keystores using the management console Management Console or using an XML configuration, and to import certificates to the keystore using the management consoleManagement Console. The WSO2 keystore management feature provides a UI and an API to add and manage keystores used for WS-Security scenarios. When you apply WS-Security to web services using the management console, you can select a keystore from uploaded keystores for encryption/signing processes. The management console also allows you to view/delete keystores.
...