Sun Oracle Crypto Accelerator 6000 Board, User Manual, Page: 181 / 266

Chapter 7 Installing and Configuring Sun Java System Server Software 159
Keystores
A keystore is a repository for key material. Associated with a keystore are security
officers and users. Keystores provide not only storage, but a means for key objects to
be owned by user accounts. This enables keys to be hidden from applications that do
not authenticate as the owner. Keystores have three components:
■
Key objects – Long-term keys that are stored for applications such as the Sun
Java System Web Server.
■
User accounts
– Accounts that provide applications a means to authenticate and
access specific keys
■
Security officer accounts – Accounts that provide access to key management
functions through
scamgr
.
Note –
A single Sun Crypto Accelerator 6000 board must have exactly one keystore.
Multiple Sun Crypto Accelerator 6000 boards can be configured to collectively work
with the same keystore to provide additional performance and fault-tolerance.
A typical installation contains a single keystore with three users. For example, such
a configuration could consist of a single keystore
keystore-name and three users
within that keystore,
webserv
,
dirserv
, and
mailserv
. This would enable the
three users to own and maintain access control of their server keys within that single
keystore.
FIGURE 7-1
illustrates an overview of a typical installation.