KeyStore Service

The KeyStore Service is required for handling certificates that are stored in a keystore.

Following two scenarios are served by the KeyStore Service:

to store sensible configuration data like passwords outside in keystore for reference in configuration files via an alias (the so called secret). Read more here: https://kgs-software.atlassian.net/wiki/x/GIAMq ),
to protect sensible configuration data in application-wide configuration (read more here: https://kgs-software.atlassian.net/wiki/x/QYCd9 ), and

to store the ArchiveLink certificates, which are necessary if the parameter <repo>.saphttp.security contains the value 1 or 2 or CMIS with secKey Token is used.

As certificates have to be imported into the keystore from time to time, it is important, that this file is read- and writeable.