Skip to main content

Setting Up TLS Keystores and Certificates

Adeptia Connect can secure communication through TLS, using a keystore to store the certificates and private keys that establish trusted, encrypted connections. This page explains what a keystore is, how Adeptia Connect uses it, and how to prepare and register your certificates so that the platform can use them.

What Is a Keystore?​

A keystore is a file that stores cryptographic keys and certificates. In Adeptia, the keystore is used to:

  • Present an identity certificate when Adeptia acts as a TLS server (so clients can verify they are connecting to the correct endpoint)
  • Store trusted CA certificates when Adeptia acts as a TLS client (so Adeptia can verify the identity of upstream services)

Adeptia supports the standard Java KeyStore (JKS) format and PKCS12 format.

Preparing Your Keystore​

Before registering a keystore in Adeptia:

  1. Obtain the certificate and private key for your deployment from your PKI team or certificate authority.
  2. Import the certificate and key into a keystore file using keytool (included with the JDK): 
    keytool -importkeystore -srckeystore source.p12 -srcstoretype PKCS12 -destkeystore adeptia.jks -deststoretype JKS
  3. Note the keystore password and the alias of the certificate entry you want Adeptia to use.

Registering the Keystore in Adeptia​

In the Portal, navigate to Administrate > Security Provider and select Keystore. Provide:

FieldValue
Keystore FileUpload the .jks or .p12 file
Keystore PasswordThe password protecting the keystore
Key AliasThe alias of the certificate entry to use
Key PasswordThe password for the private key entry (if different from the keystore password)

Save the configuration. Adeptia will use the registered keystore for TLS connections.

Trusting External Certificates​

If Adeptia needs to connect to a service that uses a certificate signed by a private CA (not a public CA), import the CA certificate into the platform's truststore:

  1. Export the CA certificate in PEM format.
  2. In the Portal, navigate to Administrate > Security Provider > Truststore and import the CA certificate.

Once trusted, Adeptia will accept TLS connections from services presenting certificates signed by that CA.