1.6.2 Managing keystores
When the communication encryption function is enabled, JP1/IM - Manager deletes and creates keystores when it starts, and deletes keystores when it stops. If the communication encryption function is disabled, JP1/IM - Manager deletes keystores when it starts.
The keystores for JP1/IM - Manager store the following files:
-
Private key
-
Server certificate
-
Certificate issued by an intermediate certificate authority (if used)
If the keystores were not able to be deleted when JP1/IM - Manager was starting or stopping, manually delete them. Perform the following procedure to manually delete the unnecessary keystores:
-
Make sure that JP1/IM - Manager is stopped.
-
Delete the unnecessary keystores.
For details about the keystore storage destination, see 9.4.4(3) Keystores for JP1/IM - Manager in the JP1/Integrated Management 3 - Manager Configuration Guide.
- Important
-
When a private key or a keystore for JP1/IM - Manager is obtained, someone might be able to decrypt encrypted communication data. Therefore, the JP1/IM - Manager administrator must strictly manage the private key and the keystore for JP1/IM - Manager. The folder that stores the private key or the keystore for JP1/IM - Manager must be set so that it cannot be accessed by ordinary users.