Can Pega be used as the certificate store mechanism or Tomcat or both ?

Question

PradeepPydi

Member since 2017

Anthem

Posted: Feb 13, 2020

Last activity: Feb 13, 2020

Posted: 13 Feb 2020 9:44 EST
Last activity: 13 Feb 2020 12:06 EST

Closed

Hi Team,

Could someone please suggest the best practice and explain if we have to use PEGA as the certificate store mechanism or Tomcat or both.

Thank you.

To see attachments, please log in.

Posted: 6 years ago

Posted: 13 Feb 2020 12:06 EST

PraneethPurighalla

PEGA

replied to PradeepPydi

I would lean towards using Pega as the certificate store for the following reasons:

1. When you add/update certificates, server restart is not required.

2. Pega developers can manage the certificates as opposed to being dependent on the folks handling app server.

I see you tagged pega platform 7.3.1 so I'm assuming you are using pega 7.3.1. The only downside I see is if you have a large number of connectors, you will have to associate each connector with the keystore instance that contains your certificates. With Pega 8.3, this is no longer a requirement since there is the concept of platform truststore. Check this out: https://community.pega.com/knowledgebase/articles/whats-new-pega-platform/import-certificates-without-restarting-server-83

To see attachments, please log in.