Public and private keys

Public and private keys

A Public Key is a publicly shareable key used to encrypt data or verify signatures, and a Private Key is a confidential key used to decrypt data or create signatures.

Adding Partner's Public Key

From Keystore

1. Click the Add Partner Public Key button.

   

2. In the Public KeyStore Configuration section, provide the following:

   1. Add key From: Select the KeyStore option.

   2. Load File: Click the Select file button and add the Public Keystore file stored in the system.

   3. Alias Name: Select the name that populates in the drop-down after adding the Keystore file.

   4. New Alias Name: Provide a new alias name.

3. Click the Save button. After successful saving, details appear in the Public-Private keys list. 

   To remove a key from the list, click the Delete icon.

From Certificates

Perform the same actions as in the above section, but select the Certificate option under the Add Key From section.

Private Key Store Configuration

Adding Host-Key Pair

1. Click the Add Partner Public Key to add the Public Key Store Configuration section.

   

2. In the Public Key Store Configuration section, provide the following:

   1. Load Keystore File: Click the Select file button and add the Private Keystore file stored in the system.

   2. Alias Name: Select the name that populates in the drop-down after adding the Keystore file.

   3. New Alias Name: Provide a new alias name.

   4. Key Client Password: Password to authenticate the key.

3. Click the Save icon. After successful saving, details appear in the Public-Private keys section.

Setting TrustStore reload-time in Jetty Server Profile configuration

For new certificates to be reloaded into the server, Trust store reload time needs to be set.

Jetty server running in the gateway server will be reloaded with new certificates within this interval.

To set the Trust Store reload time, perform the following actions:

1. Open eStudio and open the Profile Management perspective.

2. Open APIGateway Server profile.

3. Go to APIGateway > Fiorano > APIGateway > Jetty > PeerAPIManagementJetty.

4. Set the TrustStoreReload time to the required time interval.

   By default, the Truststore Reload time is set to 0 due to which the Trust store does not load.