Security Policy File Keys and Certificates

For each security domain, the security policy file also contains:

A private key and public certificate that security domain requestors use to verify the identity of the security domain controller when establishing transport connections with the security domain controller. See Transport Security for more information on the private key and public certificate.
A data encryption key that is used by each node in a metaspace to encrypt data that resides in memory or is locally persisted. See Data Encryption for more information on the data encryption key.