The Isis PKI and Keystore Service supplies a full PKI service for creating, storing and managing RSA Private/Public keys and Certificates and symmetrical keys.
Isis can manage multiple key stores files and an internal default store kept in an embedded H2 database. These stores are then accessible remotely over IIOP using the Isis Java provider library. The service uses external passwords for access which can/should be different from the actual password of the store file.
Isis allows you to sign new key pairs upon creation using a private key from any of the managed key stores.
Isis can export and import keys to and from OpenSSL format allowing you exchange keys between Java and programs that use PEM format files and CRT format files.
The service uses Spring Security Framework for access control and can be configured to use any Authentication Authorization system supported by the Spring Security Framework.
Features
- Public Key Infrastructure
- Java Keystore
- Supports OpenSSL formats
- Web Interface
- JMX Web Page or JConsole
- Alerting to files and optionally SNMP Trap and/or SMTP and/or SMS
- Virtual Machine