Manage Keystores via UI¶
The WSO2 Identity Server Management Console enables viewing keystore details such as the available certificates. To do this, you need to first upload the relevant keystore via the WSO2 Identity Server Management Console.
Before you begin
Make sure to create and store all the required keystore files in the
Do not delete the default
Follow the instructions below to upload a keystore file via the WSO2 Identity Server Management Console.
In the Main menu of the WSO2 Identity Server Management Console (
https://<IS_HOST>:<PORT>/carbon), click Manage > Keystores > Add.
The Add Key Store page appears.
Provide the required information:
- Keystore password: This is required to access the private key and provider.
- Keystore Type: This is to specify the type of the keystore file that you are uploading as JKS or PKCS12.
- JKS: Java Key Store (JKS) allows you to read and store key entries and certificate entries. However, the key entries can only store private keys.
- PKCS12: Public Key Cryptography Standards (PKCS12) allows you to read a keystore in this format and export the information from that keystore. However, you cannot modify the keystore. This is used to import certificates from different browsers into your Java Key store.
- Click Next.
- Enter the private key password.
Click Finish to add the new keystore to the list.
This keystore file is now saved to the WSO2 Identity Server registry. To see the registry path:
- On Main tab, click Manage > Registry > Browse.
/_system/governance/repository/security/key-stores/in the Location text box and click Go.
Note that the keystores added via the WSO2 Identity Server Management Console get listed out.
Follow the instructions below to view the details of the keystore that you uploaded.
- In the Main menu of the WSO2 Identity Server Management Console, click Manage > Keystores > List. The Key Store List page appears.
Click View of the corresponding keystore that you want to view. The View Key Store screen appears with the following information:
Private key certificates
- Private key certificates
- Click Finish to get back to the Keystores screen.