Type

You have the following options:

• Java Keystore

• External Keystore

• <None>

Selecting External Keystore or <None> disables the rest of the keystore settings. Selecting External Keystore will require additional input in the External Keystore tab.

Path

Enter the location of the keystore from which you want to read the key. 

Password

Enter the relevant keystore password. 

Public Key Alias

The encryption alias to use. In a client, it should be the alias to the server public certificate. If left empty the Keystore Alias will be used to encrypt the message.

Private Key Alias

If the keystore contains more than one key, specify the alias of the key that you want to use.

Key Password

The Key Password fields is optional. You can enter the key password, or if you leave this field empty, the Password that you entered is the default.

Type

You can select from the following options: 

• Java Truststore

• Use Java Keystore

• External Truststore

• Use External Keystore

• <None>

Selecting Use Java Keystore disables the rest of the truststore settings and the keystore specified in Keystore Settings is used.

Selecting External Truststore or Use External Keystore disables the rest of the truststore settings and will require more input in External Keystore tab.

Selecting <None> disables the rest of the truststore settings.

Path

Enter the location of the truststore that you want to use. 

Password

Enter the relevant truststore password.

Enable TLS Settings

If you want to change the TLS security parameters, select this check box. The default setting is to use the settings from the Java installation.

Accepted Protocols

You can select if you want agents using this profile to accept only TLS version 1.3 or any TLS version. The default setting is to only accept version 1.3.

Used Cipher Suites

You can select if you want agents using this profile to use only suites that are enabled by default, or any suites. The default setting is to only use suites that are enabled by default.

Cipher Suite Must Match

In this field, you can enter any characters that you want the cipher suites to match. You can also enter lists of regular expressions, one per row, that you want the cipher suites to match. Suites not matching your entry are greyed out in the Result on this JVM field.

Cipher Suite Must Not Match

If you want to exclude cipher suites, you can enter any characters in this field which excludes suites matching the characters. You can also enter lists of regular expressions, one per row, for cipher suites to exclude.

Result on this JVM

This field displays the cipher suites available on the current JVM.

Azure KeyVault Profile

Choose an Azure KeyVault Profile to use for the credentials.

Certificate name

The name of the certificate in Azure KeyVault

Google Secret Manager Profile

Choose a Google Secret Manager Profile to use for the credentials.

Name

The name of the certificate stored in Google Secret Manager.

Version

The version of the Secret.

Key Password

Password of the certificate.

Auth Methods

Select the authentication method used to access the vault.

Address

The address for the vault. The format of the address begins with the hypertext transfer protocol, either HTTP or HTTPS, followed by the IP address of the vault and the TCP port used by the TCP listener of the vault.

Username

Enter the vault username.

Password

Enter the vault password.

Path

The full path of the vault secret engine that contains the relevant keystore or truststore.

filecontent

Base64 String

keyalias

String

keypassword

String

password

String

filecontent

Base64 String

password

String