Page History

...

• Certificates are created:
  • either from a CA independently from JS7,
    • This applies to users of JS7 who require the "high" Security Level and therefore operate a CA on of their own.
  • or directly from the JS7 JOC Cockpit.
    • This applies to users of JS7 who prefer a modest Security Level "low" or "medium" Security Level without the effort of maintaining a CA.
    • The JOC Cockpit implements:
      • a Root CA and Intermediate CA to create certificates for JS7 components.
      • deployment capabilities to prepare the security configuration for JS7 components, i.e. to generate keystores and truststores which the relevant certificates are added to.
• Certificates can be maintained with JOC Cockpit if an individual CA is not in place.
  • Private Keys and Certificates are stored with the JS7 database.
  • A user interface is available for operations on certificates, such as creating, updating and deleting certificates.
• Certificates are prepared for deployment:
  • A keystore and truststore to hold the required certificates is created for individual JS7 components such as Controllers or Agents.
  • Keystores and truststores can be forwarded to Controllers and Agents by any suitable means, for example by file transfer, SSH, transportable disks etc.
  • Keystores and truststores can be imported to Controllers and Agents using a shell script.

...