Private Keys installed with Certs

[jamesdittmer]

We have 2 way tls setup.

When we installed the cert we had to install that with the Private Key.

On the apigee side we would like to know what is happening with the Private Key.

How is the Key stored?

Is it being used for anything other than storing the cert.

Is the key stored?

Here is a line I got from apigee docs.

For two-way TLS, both the TLS client and the TLS server can use a trust store. A trust store is required when performing two-way TLS when Edge acts as the TLS server.

Link:

https://docs.apigee.com/api-platform/system-administration/keystores-and-truststores

@james.dittmer@hallmark.com

[dchiesa1 · Accepted solution]

The private key is stored in the persistent store used by Apigee Edge, with a machine encryption key.

The private key is used only for TLS authentication. It is not used "to store the cert". It is used when negotiating TLS connections. Standard TLS stuff.

[jamesdittmer]

Thanks for the response.