nevisKeybox-Based Key Management

You can use the nevisKeybox Store pattern for the creation of keystores and truststores. The pattern provides the necessary configuration for using key material from an existing nevisKeybox instance already available on the deployment hosts.

Pros:

• A powerful solution based on the existing nevisKeybox command line interface.
• Builds on established concepts. The master for the nevisKeybox content is nevisKeybox.

Cons:

• nevisAdmin 4 does NOT deploy into nevisKeybox. Manual tasks are required on all target hosts.

This solution is suitable for the migration of existing hosts and for complex setups that are not yet covered by the automatic or PEM-based approaches.