Novell ACCESS MANAGER 3.1 SP1 - ADMINISTRATION Manual page 45

The Administration Console creates a keystore in the file system of the device that is assigned to the
keystore.
Linux Device:
/opt/novell/devman/jcc/certs/<device>
Windows Device:
C:\Program Files\novell\devman\jcc\certs/<device>
The <device> can be idp (for the Identity Server), esp (for the Embedded Service Providers,
including Access Gateways, J2EE agents, and SSL VPN servers), or sslvpn (for the SSL VPN
server).
Access Manager creates keystores for the following devices:
"Identity Server Keystores" on page 45
"Access Gateway Keystores" on page 45
"J2EE Agent Keystores" on page 46
"SSL VPN Keystores" on page 46
"Keystores When Multiple Devices Are Installed on the Administration Console" on page 47
Identity Server Keystores
Access Manager creates the following keystores for each Identity Server cluster configuration:
Signing: This keystore contains the certificate that is used for signing the assertion or specific parts
of the assertion.
Encryption: This keystore contains the certificate that is used to encrypt specific fields or data in
assertions.
SSL Connector: This keystore contains the certificate that the Identity Server uses for SSL
connections. If multiple devices are installed on the same machine, the Identity Server uses the
COMMON_TOMCAT_CLUSTER keystore.
Provider Introductions SSL Connector: This keystore contains the certificate that you configure
when you set up the Identity Server to provide introductions to service providers that are trusted
members of a service domain. The subject name of this certificate needs to match the DNS name of
the service domain.
Consumer Introductions SSL Connector: This keystore contains the certificate that you configure
when you set up the Identity Server to consume authentications provided by other identity providers
that are trusted members of a service domain. The subject name of this certificate needs to match the
DNS name of the service domain.
Access Gateway Keystores
Access Manager creates the following keystores for each Access Gateway or cluster:
Signing: This keystore contains the certificate that is used for signing the assertion or specific parts
of the assertion.
Encryption: This keystore contains the certificate that is used to encrypt specific fields or data in
assertions.
Security and Certificate Management 45