client_key_gen
Use this script file to create the server keystore, the client keystores, and
the certificates, to register the certificates as trusted certificates, to list the labels of the
client certificates in the server keystore, and to remove client certificates from the server
keystore. You need the keystores and certificates for secure connections between the API and a
Collector Server
instance.
The script file is installed with the base package.
Creating the keystores and the certificates and registering the certificates
Create the server keystore and as many client keystores as you need certificates. By creating the client keystores together with the server keystores, the client certificates are registered with the server keystore and the server certificate is registered with all client keystores.
Adding client keystores
Add as many client keystores as you need additional certificates. The new client certificates are automatically registered with the specified server keystore, and the server certificate is registered with the new client keystores.
Adding client certificates to a server keystore
If the API communicates with several Collector Server instances, you must register the client certificates that were created on one Collector Server instance with the server keystore on the other Collector Server instances.
Listing the labels of the client certificates in a server keystore
When you add a client certificate to a server keystore, you must specify a unique label for the server certificate. You can list the labels of the server certificates that a client keystore already contains.
Removing a client certificate from the server keystore
If a client certificate is no longer needed, for example, because a user no longer has a business need to access a specific Collector Server , remove the certificate from the server keystore.