Provider keystore

The IBMPKCS11Impl provider supports one KeyStore type: PKCS11IMPLKS. This KeyStore is not a standard flat file keystore. This keystore accesses certificates and keys from the hardware device. In 1.4.2, this keystore did not save keys or certificates to the card using the setKeyEntry or setCertificateEntry call. However, the setKeyEntry method did translate a key for use with this provider. (Note that these translated keys were only session keys and were not permanently saved on the hardware device. These keys only existed for the length of provider initialization.) Since 5.0, the keystore was updated to actually save the keys and certificates to the card. This is only important if you are trying to be compatible between 1.4.2 and higher or your application was written in 1.4.2, but needs to run on a higher version.