Creating a truststore

Create a keystore by uploading a public and private key pair.

Before you begin

Review TLS profiles the to understand the concepts of TLS profiles, keystores, and truststores, and the purpose of the default profiles that are created at installation.
Your private and public keys must be in PEM or P12 formatted files. For information on generating TLS certificates and keys, see Using OpenSSL to generate and format certificates.
You must have the Administrator role to create a truststore.

About this task

DataPower Interact Gateway provides pre-configured truststores that are created at installation, and which can be used for testing and demonstration purposes. For production deployments, it is recommended to create new truststores that contain your own TLS certificates.

Note: If you create your own TLS profiles, DataPower Interact Gateway verifies certificates when you upload them but does not continuously monitor them for expiry. You are responsible for monitoring and updating your certificates before they expire.

Procedure

In DataPower Interact Gateway, click Settings.
Select Crypto Material.
In the Truststore section, click Create.
The Create keystore page appears.

Provide the following details:

Table 1. TLS client profile configurations
Field	Description
Title	Enter a title for the truststore.
Name	The name is auto-generated from the title, with spaces and other URL-unsafe characters replaced.
Summary	Enter a description of the truststore.
Upload truststore certificates	Upload the file that contains the public key certificate.

Click Save.

Note: Uploaded keys and certificates cannot be downloaded from DataPower Interact Gateway.