OUD - How to Use Keystore (for Private Keys) and Truststore (for Public and Signed Certificates) (Doc ID 1958191.1)

Last updated on JULY 10, 2023

Applies to:

Oracle Unified Directory - Version 11.1.2.2.0 and later
Information in this document applies to any platform.
The goal of this document is to describe: How OUD uses the different Keystores

Purpose

This KM doc describes how to use keystores (for private keys) and truststores (for public, signed certificates).

Up to three sets of key stores are used, as shown in the diagram below -

By default the key stores are located in the <OUD_INSTANCE_ROOT>/config directory.

The keystore and truststore hold keys for securing connections with client applications.
The admin-keystore and admin-truststore hold keys for securing administrative connections through the ADMIN_PORT, such as those used when connecting with the dsconfig command.
The ads-truststore holds keys for securing replication connections with other OUD servers in the replication topology.