TrustStore Settings
Overview
TrustStore Settings, which allow you to manage the default TrustStore, are available through the user interface.
The user running the Tomcat process has to have write access to the TrustStore file to import trusted certificates, examine certificates or delete entries.
After importing or deleting an entry, restarting the controller may be required for the changes to take effect.
Deleting and importing is only for the current cluster node.
If you choose not to use the JRE TrustStore, you must configure the following properties in the Universal Controller Start-up Properties (uc.properties) file:
These properties will take effect only after you restart Tomcat.
TrustStore Settings Details
See the field descriptions below, for a description of all fields and buttons that display in the TrustStore Settings Details.
TrustStore Settings Field Descriptions
| Field Name | Description |
|---|---|
| Details | This section contains information on the TrustStore details. |
| TrustStore Name | The name of the default TrustStore. This is determined by the uc.trustmanager.truststore property. |
| TrustStore File | The actual file name for the default TrustStore. In most cases, if the TrustStore Name is specified then the TrustStore File will be the same; however, if the TrustStore Name is not specified or is not accessible, then a different default TrustStore may be used (e.g. java-home/lib/security/cacerts). If the TrustStore File is blank, then no accessible TrustStore could be found and an empty immutable TrustStore will be used instead. |
| TrustStore Type | The type for the default TrustStore:
|
| TrustStore Provider | The provider for the default TrustStore. |
| TrustStore Password | The password for the default TrustStore. A masked value will be show if the TrustStore password is specified; otherwise, it will be blank. |
| Entries | This section contains information on the TrustStore entries. |
| Alias | |
| Type | Entries can be one of the following types:
|
| Algorithm | Key algorithm. |
| Certificate Expiration | The date and time that the certificate expires. |
| Created | The date and time that the entry was created. |
| Buttons | This section identifies the buttons displayed above the TrustStore settings. |
Import Trusted Certificate... | Opens a dialog to import a trusted certificate. |
| Examine Certificate... | Opens details for the selected entry. |
Delete | Deletes selected entry from the TrustStore. |
Certificate Details
Certificate Details Field Description
| Field Name | Description |
|---|---|
| Details | This section contains information on the Certificate details. |
| Version | The version number (1, 2, or 3) |
| Issuer | The distinguished name (DN) of the certificate’s issuer. |
| Subject | The distinguished name (DN) of the certificate’s subject (owner). |
| Serial Number | The serial number generated by the certificate’s issuer. |
| Valid From | The date and time that the certificate is valid from. |
| Valid Until | The date and time that the certificate is valid until. |
| Signature Algorithm | The algorithm used to sign the certificate. |
| Public Key Algorithm | The algorithm used for the public key. |
| Fingerprints | The SHA-1 and SHA-256 certificate fingerprints. |
Importing a Trusted Certificate
The import does not perform a chain of trust check for the certificate being imported. It is the responsibility of the user to first examine the certificate and verify that the certificate can be trusted before importing it.
| Step 1 | From the Administration navigation pane, select TrustStore Settings. The TrustStore Settings page displays.
|
|---|---|
| Step 2 | Click the Import Trusted Certificate... button at the top of the page. The Import Trusted Certificate pop-up dialog displays.
|
| Step 3 | Click Choose File to select the trusted certificate to import and use the Alias field to specify a unique entry name. |
| Step 4 | Click Import. |
Examining a Certificate
| Step 1 | From the Administration navigation pane, select TrustStore Settings. The TrustStore Settings page displays.
|
|---|---|
| Step 2 | Click the Examine Certificate... button at the top of the page. The Examine Certificate pop-up dialog displays.
|
| Step 3 | Click Choose File to select the certificate to examine. |
| Step 4 | Click Examine. The Certificate Details for the selected file displays.
|
Viewing Certificate Details for a Trusted Certificate Entry
| Step 1 | From the Administration navigation pane, select TrustStore Settings. The TrustStore Settings page displays.
|
|---|---|
| Step 2 | Right-click on an entry in the Entries section to display an action menu and click View Certificate Details. The Certificate Details for the selected entry displays.
|
Deleting a TrustStore Entry
| Step 1 | From the Administration navigation pane, select TrustStore Settings. The TrustStore Settings page displays.
|
|---|---|
| Step 2 | Right-click on an entry in the Entries section to display an action menu and click Delete. The Confirm deletion dialog displays.
|
| Step 3 | Click Delete. |
