Keystore Provider

Keystore Provider shared resource provides an access to a keystore.

General

The General section has the following fields.

Field Description
Package The name of the package in which you want to create a shared resource.
Name The name of the shared resource.
Description A short description of the shared resource.

Keystore

This section has the following fields.

Field Literal Value/Module Property Description
Provider None The name of the keystore provider. Select from the following available options:
  • SUN
  • IBMJCE

When you select Keystore Type as PKCS#11, this field becomes editable and a drop-down list shows a list of PKCS#11 security providers.

Default: Empty. The first matching provider supporting the format is selected.

URL Yes The location of the keystore.

This field is disabled when you select Keystore Type as PKCS#11.

Password Yes The password for the keystore.
Type None The type of the keystore. Select from the following types:
  • JCEKS: Java Cryptography Extension KeyStore
  • JKS: Java Key Store
  • PKCS#11: Hardware keystore type
  • PKCS#12: Standard keystore type

The default value is JKS.

Note: To configure PKCS#11, enable FIPS configuration of a system. For more information about enabling FIPS mode, see JDK 8 PKCS#11 Reference Guide at Oracle.com.
Refresh Interval Yes Refresh interval, greater than 0. If the keystore provider is accessed after the refresh interval has expired:
  • The refresh timer is reset to zero.
  • The operations on the keystore provider are performed on the refreshed copy.

This field is disabled when you select Keystore Type as PKCS#11.

The default value is 3600000.

Note: It is recommended not to use expired certificates.