Keystore Provider

The Keystore Provider resource template provides access to a keystore.

General

Property Required? Editable? Accepts SVars? Description
Keystore Served From Y Y N Location of the keystore:
  • Store the keystore in Administrator and serve it from here
  • The keystore is hosted externally at URL
Administrator - Upload Keystore From Y Y N Path to the keystore to be uploaded into Administrator. After the keystore is uploaded, a link displays from which the keystore can be downloaded.
URL Y Y Y Location of the external keystore.
Password Y Y Y Password for the keystore.

(Administrator only) For superusers, passwords display encrypted. For non-superusers, the password doesn't display even if it was set when it was created. If you have permission to edit the password, you can specify a new value and save. If you edit other fields, the old value for the password field is retained. If you want to set an empty value as password, click the link Set Blank Password.

Provider N Y Y Name of the keystore provider:
  • SunJCE (JCEKS format)
  • SUN (JKS format)
  • IBMJCE (IBM JREs)
  • SunJSSE (PKCS12 format)

Default: Empty. The first matching provider supporting the format will be chosen.

Type Y Y Y Type of the keystore: JCEKS, JKS, PKCS12.

Default: JKS.

Refresh Interval (ms) Y Y Y Refresh interval, greater than 0. If the keystore provider is accessed after the refresh interval has expired:
  1. The keystore provider is refreshed from its backing keystore.
  2. The refresh timer is reset to zero.
  3. Operations on the keystore provider are performed on the refreshed copy.

Default: 3600000.

Maximum Pool Size Parameter in CLI

You can now set the maxPoolSize value in the resourcetemplate_data.xml to control the Pool Size. This file is located in the <CONFIG_HOME>\admin\<InstanceName>\samples folder.

For example, in the resourcetemplate_data.xml excerpt shown below, the maxPoolSize is set to 45: 

<ResourceTemplate xsi:type="amxdata:KeystoreCspResourceTemplate"  
name="KeystoreRT"  
description="This is a Keystore RT"  
keyStoreLocation="/path/to/keystore.jceks"  
keyStorePassword="unique"  
keyStoreType="JCEKS"  
keyStoreProvider="SunJCE"  
maxPoolSize="45"  
keyStoreRefreshInterval="3600000"/>
Note: The above CLI Data file changes are applicable to Resource Templates with a 'Global' scope. If a given Resource Template is scoped at 'Application' or 'Environment' level, resourcetemplate_scope_build.xml and resourcetemplate_scope_data.xml files will have to be updated.