Creating a keystore

Keystores contain matched pairs of public certificates and private keys that are used to secure TLS connections.

Before you begin

Your private and public keys must be in PEM or P12 format files.
Note: For information on generating TLS certificates and keys, see Using OpenSSL to generate and format certificates.

One of the following roles is required to configure keystores:

  • Organization Administrator
  • Owner
  • Custom role with the Settings: Manage permissions

Procedure

Complete the following steps to create a keystore:

  1. In the API Manager, click Resources Resources.
  2. Select Crypto Material.
  3. Click Create in the keystore table.
    Field Description
    Title Enter a title for the keystore.
    Name The name is auto-generated and based on the title (with spaces and other URL unsafe characters replaced).
    Summary Enter a brief description.
    Private key & public key: Step 1: Upload private key Upload the file that contains the private key certificate. If necessary, you can click Browse to locate the file. If the file contains both the private and public keys, upload it in Step 1. Private and public keys are always uploaded in pairs, either in a single file or separate files.

    Keys can be in PEM or P12 format, and must contain all intermediate certificates (up to a maximum of 10).
    Private key password If the private key has a password, then enter it here.
    Private key & public key: Step 2: Upload public key If the public key is contained in a separate file, upload it in Step 2. Private and public keys are always uploaded in pairs, either in a single file or separate files.

    Keys can be in PEM or P12 format, and must contain all intermediate certificates (up to a maximum of 10).
  4. Click Save.
    Note: Uploaded keys and certificates cannot be download from API Connect.