Policy Server Guides › Policy Design Guide › Certificate Authorities and Web Services Variables › Keys and Certificates in the Key Database

Keys and Certificates in the Key Database

The following gets stored in the key database:

• An enterprise private key and certificate for signing WS-Security documents and generating X509v3 tokens.
• Public key certificates that correspond to the private keys used for signing the WS-Security documents and generating the tokens. These certificates are used to validate the WS-Security documents.

A given Policy Server may sign and/or verify WS-Security documents. Keys and certificates for signing and validation can be added to the same key database, depending on what the Policy Server is doing.

The table in the following figure shows which objects you need to add to the key database to handle particular WS-Security signing and validation requirements.