Web Services › Invoke SOAP Method Operator › Input Parameters › WS Security › Common WS Security Parameters › Keystore Parameters

Keystore Parameters

When you sign or encrypt a SOAP request, the product requires many keys to handle various responsibilities. The product uses keys in WS Security to sign or encrypt the SOAP request and to validate the SOAP response signature or decryption (if applicable).

CA Process Automation uses a keystore (a repository of security certificates) to maintain the keys that are used in WS Security. Keystores provide organization and consolidation for keys, and prevent other users from accessing the unique private keys. The product requires that you create a keystore or use an existing one.

WS Security includes the following keystore options:

• Sign the SOAP request (or parts of it). The keystore contains the following items:
  • The private key to use to sign the request.
  • The associated public key with which the receiver validates the signature. The product adds a reference to this public key to the signed SOAP request.
• Encrypt the SOAP request (or parts of it). The keystore contains the public key with which to encrypt the symmetric key. The product uses the symmetric key to encrypt the request.
• Validate the SOAP response signature. The keystore contains the public key with which to validate the signature (if applicable).
• Decrypt the SOAP response. The keystore contains the private key with which to decrypt the response.

The following parameters define the keystore with which to sign or encrypt a SOAP request:

Signature/Encryption Keystore Path

Defines the path to the keystore.

Signature/Encryption Keystore Password

Defines the clear text password with which to access the keystore.

Note: This parameter is not the password to access a private key in the keystore, but rather the password to access the keystore itself.

Signature/Encryption Keystore Type

Specifies the type of keystore.

Values:

• JKS
• PKCS12 (which typically has a .p12 extension)
• Blank (the product uses the default value)

Default: JKS