Release 10.1A: OpenEdge Getting Started:
Installation and Configuration

> ## Managing OpenEdge Key and Certificate Stores

> All OpenEdge server and client components that implement Secure HTTP (HTTPS) or Secure Socket Layer (SSL) connections require access to private keys and digital certificates to negotiate these connections and to enable them to function securely.

> For all OpenEdge components, OpenEdge provides utilities that allow you to install and manage keys and digital certificates (in key stores and certificate stores) so the components can use them. For Open Clients and clients of Progress 4GL Web services, OpenEdge provides utilities for some clients or relies on utilities provided by the client platform to manage the required certificate stores.

> This chapter describes how to use the OpenEdge utilities, as detailed in the following sections:

> - Managing key stores for OpenEdge servers

> - Managing certificate stores for OpenEdge clients

> An SSL server requires access to a private key and digital (public-key) certificate to authorize the identity of the server. Clients require access to public-key certificates that allow them to authenticate the servers that they access. Both servers and clients must obtain their keys and certificates from a trusted source, a Certificate Authority (CA). The server can trust the CA to authorize the server’s identity and the client can trust the CA to provide proof of the server’s identity. For more information on keys, certificates, and how CA’s support them, see the chapters on security in OpenEdge Getting Started: Core Business Services .

Copyright © 2005 Progress Software Corporation www.progress.com Voice: (781) 280-4000 Fax: (781) 280-4095