Keystores and certificates exchange signers

Use this page to extract the signer part of a personal certificate from one keystore and add it to another keystore as a signer certificate. Signer certificates can also be listed, and they will be added to the other keystore as well.

To view this administrative console page, click Security > SSL certificate and key management. Under Configuration settings, click Manage endpoint security configurations > {Inbound | Outbound} > ssl_configuration. Under Related items, click Key stores and certificates then select two key stores to exchange and click the Exchange signers.

Note: Any changes made to this panel are permanent.

[keystore] personal certificates

Specifies the personal certificates and signer certificates that are currently stored in the specified keystore.

Press and hold the Ctrl key to select more than one item from the list.
Data type: Text

[keystore] signers

Specifies the trusted signer certificates that are currently stored in the specified keystore and selected for the exchange.

Press and hold the Ctrl key to select more than one item from the list.
Data type: Text

Add

Specifies to extract the signer from the selected personal certificate in the keystore list on the left and add it to the signers list of the keystore on the right.

After the certificate is added, it no longer displays in the left-hand list. The personal certificate is still in the keystore, but it is no longer selectable

Remove

Specifies to remove a selected signer from the signers list of the keystore on the right. The removed certificate displays in the keystore list on the left.




Related tasks
Creating a Secure Sockets Layer configuration
Related reference
Keystores and certificates collection
Reference topic    

Terms of Use | Feedback

Last updated: Oct 21, 2010 5:30:17 AM CDT
http://www14.software.ibm.com/webapp/wsbroker/redirect?version=compass&product=was-nd-iseries&topic=usec_sslexchgsigners
File name: usec_sslexchgsigners.html