Certificate store profiles

A certificate store profile is used to group collections of certificates and private keys into different containers.

The certificate store profile can be referenced by a secure channel profile in the same profile configuration.

Note:

To set up security channel profiles and certificate store profiles, you must have a good working knowledge of the security area.

 

Settings and containers	Description
Name	The name of the web service profile.
URI	The URI of the profile.
Trusted authorities certificates	List of trusted CA root certificates. In order to trust a peer certificate, the complete certificate chain must be trusted and available. This is done by adding all intermediate certificates including the root CA to the list of trusted authorities. Note: Trusted authorities certificates is the supported certificate type when accessing a Media Management repository securely.
Trusted peers	N/A – For future use.
Authentication certificates	List of public certificates. For example, to encrypt emails delivered via an SMTP (MIME) output connector or to verify signatures in such emails.
Private keys	List of private keys. For example: • To encrypt signatures in emails delivered via an SMTP (MIME) output connector. • To prove server identities in SSL/TLS communication. • To prove client identities in SSL/TLS communication.

 

Edit Certificate Information dialog box

In the Edit Certificate Information dialog box, you add password, aliases, and alias passwords for a certificate in the Trusted authorities certificates, Trusted peers, or Authentication certificates container.

Settings	Description
Certificate resource	The certificate resource.
Certificate resource password	The certificate password (only if the certificate file is encrypted).
Alias	The certificate alias. An alias can be required in certain scenarios. For example, if the certificate store profile is used to sign or encrypt emails delivered via an SMTP (MIME) output connector and the certificate does not contain the email address that the certificate belongs to. In this case, the alias is used to match the email address (case sensitive).
Password	The alias password.

 

Edit Private Key Information dialog box

In the Edit Private Key Information dialog box, you add password, aliases, and alias passwords for a private key in the Private keys container.

Settings	Description
Private key resource	The private key resource. The private key can be stored in PKCS12 or PEM format. In some scenarios, the private key could also be stored in a Java KeyStore format.
Private key resource password	The password to decrypt an encrypted private key resource. If the private key resource is a Java KeyStore (and protected), then the password is used to decrypt the complete KeyStore.
Alias	The private key alias. If the private key resource format supports multiple private keys inside the same resource, then the alias is used to identify individual keys within the resource. If the private key resource is a Java KeyStore, then the alias matches the alias in the Java KeyStore. Note: There can be 0 or more aliases per private key resource.
Password	The alias password, needed to access a private key identified by an alias. If the private key resource is a Java KeyStore, then the alias password matches the alias password used in the KeyStore. Note: There is one password per defined alias.