| Note | ||
|---|---|---|
| ||
Important! In WSO2 products (based on Carbon 4.4.0 and later versions), you can use the management console to view details of your keystores. To do this, you must first upload the relevant keystore to from the registryUI, and then see view details such as the certificates available in the keystore. See details below. |
Prerequisites
All the WSO2 Security Management feature is installed in your product, you can manage the keystores using the management console. In order to do this, all the required the required keystore files should first be created and stored in the <PRODUCT_HOME>/repository/resources/security/ directory. For information on how to create new keystore files, see Creating New Keystores, and for information on how to update configuration files in your product with keystore information, see Configuring Keystores in WSO2 Products.
...
Follow the instructions below to add upload a new keystore file to your product using the management console and to access its details.
- Log in to the WSO2 product with your username and password.
- Go to the Configure tab and click Key Stores.
- The Key Store Management page appears. Click the Add New Key store link.
- Specify the Provider and the Keystore Password, which points to the password required to access the private key.
- In the Keystore Type field, specify whether the keystore file you are uploading is JKS or PKCS12.
- JKS (Java Key Store): Allows you to read and store key entries and certificate entries. However, the key entries can store only private keys.
- PKCS12 (Public Key Cryptography Standards): Allows you to read a keystore in this format and export the information from that keystore. However, you cannot modify the keystore. This is used to import certificates from different browsers into your Java Key store.
- Click Next and on the next page, provide the Private Key Password.
Click Finish to add the new keystore to the list.
- The keystore file is saved to the registry of your product. To see the registry path click Registry → Browse on the navigator, and go to _system → governance → repository → security → key-stores. The keystores added from the UI will be listed here.
Follow the instructions below to view details of keystores that are stored in the registrythe keystore you uploaded.
- Log in to the WSO2 product with your user name and password.
- Go to the Configure tab and click Key Stores .
- The Key Store Management page appears. All the keystores that are currently added to the product will be listed here.
- Click View in the list of actions. The View Key Store screen shows information about the available certificates.
It also displays information about private key certificates:
- Click Finish to go back to the Key Store Management screen.