[Keystore] - Private Keys (SSL / TLS)

You can install any number of private keys within the Layer7 gateway. The keys remain inactive until

• A keys special purpose is set to “SSL”
  In this case the private key is used to authenticate the gateway on all listen ports that do not have a dedicated key configured

• A key is explicitly configured in a listen port
  In this case the private key is used to authenticate the gateway for this listen port, no matter if its special purpose flag is used or not

The adaptable driver decides which of the operations is to be carried out, based on the value of the “listen port” parameter. If it is not set, the key in question is set to special purpose “SSL”. If it is set the key is referenced in the listen port specified.

[Truststore] - Trusted Certificates

Trusted certificates don’t have any activation step in the Layer7 gateway. If this process step is called from Venafi with the “Install Trusted Certificate” parameter set to “yes” the call will return “NotUsed” at all times.