GenerateKeystoreSysAction

The System Action designed to generate a keystore for use in the DirX Access application.

New password

The password of the new keystore to be generated. The password is generated in case not set.

Keystore entries

The entries referencing the new cryptographic material of the new keystore to be generated.

Type (required)

Type of the crypto material.

  • Allowed Values:

    • VERIFICATION_CERTIFICATE

    • ENCRYPTION_CERTIFICATE

    • CERTIFICATE

    • SIGNING_KEY_PAIR

    • DECRYPTION_KEY_PAIR

    • KEY_PAIR

Used algorithm

Algorithm used for the purposes defined by the type.

Alias (required)

An alias referencing to given crypto entry.

Password

Password to given crypto entry.

Valid from

The epoch timestamp in milliseconds of the time this crypto entry shall be used from.

Valid to

The epoch timestamp in milliseconds of the time this crypto entry shall be used to.

Paired alias

An alias referencing to a crypto entry that is a counterpart to given entry (if any). E.g., alias of a certificate entry to a private key entry described by given alias.

Key-pair size

The size of the new key-pair in number of bits.

Signature algorithm

The signature algorithm of the new X509 certificate of the new key-pair.

Certificate subject domain name

The X509 certificate subject domain name ('X500Principal') of the new X509 certificate of the new key-pair.

Certificate key usage

The key usage extension of the X509 certificate request, represented as a bit string according the RFC5280. (digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment, keyAgreement, keyCertSign, cRLSign, encipherOnly, decipherOnly)

Certificate extended key usage

The set of OIDs to represent the extended key usage extensions of the X509 certificate request.

Certificate rfc822 items

The set of rfc822 items for the subjectAlternativeName extension of the new X509 certificate of the new key-pair.

Certificate dNSName items

The set of dNSName items for the subjectAlternativeName extension of the new X509 certificate of the new key-pair.

BasicConstraints

CA:FALSE or CA:TRUE or the new X509 certificate.

Issuer

The reference or the keystore itself with the private key and respective certificate with CA capabilities to be able to sign and create new key-pairs. The new key-pair is self-signed in case there is no issuer.

Use configuration from issuer

The decision whether to use algorithm, signature algorithm and key size configuration from the issuer.

Destination directory

The destination directory of the new keystore archive in case archive generation response is requested.

Type of generation

The type of the intended generation.

  • Allowed Values:

    • ARCHIVE

    • CRYPTOSTORAGE