Client Digital Certificates

When client authentication with a digital certificate is required by the EMS server (see the description of the ssl_require_client_cert parameter in tibemsd.conf), the client may combine its client certificate and private key in a single file in one of the following formats:

  • PKCS#12
  • Java KeyStore

You can also store the private key file separately from the client certificate file. If this is the case, the certificate and private key must be stored in one of the following formats:

  • PEM
  • PKCS#8

The format of the client digital certificate and private key file depends on the TLS vendor used by the client. For more information about formats, see your TLS vendor’s documentation.