IBM Support

Difference among certificate folders in DataPower appliances

Question & Answer


Question

What are the differences among the cert, sharedcert, and pubcert folders? Why can I not upload certificates to the sharedcert folder?

Cause

The certificate folders on the appliance have different purposes and permission levels. See below for details.

Answer

Certificate folders:
  • pubcert - Contains certificates that are commonly used by Web browsers. Certificates in this folder are accessible from any application domain; however, you must be in the default domain to upload public certificates to this folder.
  • sharedcert - Contains keys and certificates for application development. Keys and certificates in this folder are accessible from any application domain.  You must also be in the default domain to upload certificates to this folder.
  • cert - Contains keys and certificates for application development. Keys and certificates in this folder are specific to an application domain, not accessible from any application domain. You must be in the specific application domain to create or upload keys and certificates to this folder.

[{"Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SS9H2Y","label":"IBM DataPower Gateway"},"ARM Category":[{"code":"a8m50000000CeBMAA0","label":"API Connect->Security (SE)->Certificates"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Version(s)"}]

Document Information

Modified date:
08 June 2021

UID

swg21326751