User guide

Constructing a Key Pair/Certificate Management Environment
14-7
Constructing a Key Pair/Certificate Management
Environment
If the security function is to be used in the Web service, how to construct a key pair/certificate
management environment depends on the functions to be used and the environment (whether a server
system or a client system).
This section explains how to construct and manage a key pair/certificate management environment
using the soapSetSecurity and soapMngSecurity commands.
Constructing a Key Pair/Certificate Management Environment
Construct the following environment and then acquire a certification authority certificate and a site
certificate from the certification authority for registration.
• Web service security environment information file
• File used to register and manage the key pairs (public-key and private-key), certification authority
certificates and site certificates (hereafter called "the certificate management file")
Figure 14-1 shows the procedure for constructing a key pair/certificate management environment used
by the security function.
Figure 14-1 Constructing a Key Pair/Certificate Management Environment
In the following cases the creation of a key pair and the acquisition of a site certificate from the
certification authority is necessary:
• To generate the SOAP digital signature.
• Decryption using the XML encryption.
• Client authentication in SSL-encrypted communication.
Note
Refer to Environment Construction when a Private-key is needed.