The keystore is the page where you can modify the keystore specific to your account.Each Babelway account environment has its own keystore and is able to add or remove certificates without affecting other users.

A key is private information that is only known by your account environment and may not be shared with others.It holds the secret that only you can know to decrypt messages sent to you.

A certificate is public information that can be share with others and be known by anyone. It allows them to verify that your signature could only have been generated with the key corresponding to the certificate.

Key/Certificate pairs can be self-signed but are usually generated by certificate authorities such as Thawte Consuting, Verisign Inc.,Comodo CA Limited….etc

You can Edit Keystore by clicking on “Keystore edit” on Edit Environment page

You can download the certificates or revoke them as illustrated below

Figure 6.17. Manage Keystore Certificates

Certificates

This section lists all pair of key and certificates that are currently in you keystore. Those are typically used to sign outgoing messages or decrypt incoming messages. In order to share the certificate with your partner, you can download the certificate using the Download link. Note that the downloaded file will never include your private key and only contain your public certificate.

You can add new pair of key/certificate using a PKCS12 file under the Add new Certificate section.

Trusted certificates

This is the list of trusted certificates currently in your keystore. A trusted certificate corresponds to the public certificate of one of your partners.

You can add a new trusted certificate either by using an https URL. In this case, the certificate linked to the HTTPS page will be trusted. You can also add a new trusted certificate using the certificate file provided by your partner.

In each case, you can select to trust the root of the given certificate. If you choose to do so, all certificates generated by the certificate authority will be trusted.

To read more about Https gateway See HttpClientOut Gateway