---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Set up a keystore and encryption keys

# Set up a keystore and encryption keys {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 30. Juni 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Set up the keystore and encryption keys used by the Edge Encryption proxy server.

## Vorbereitungen

Role required: security_admin

## Prozedur

1. Carefully determine the appropriate type of keystore to use based on your organization's needs.  
   {#set-up-keystore__table_sj1_jpd_wz__entry__2}

   | Supported keystore | Description |
   |-|-|
   | File store | Keys are stored in a file in a file system accessed by the Edge Encryption proxy server. Because encryption keys stored in a file are not encrypted, it is your responsibility to protect these files. |
   | Java KeyStore | A Java KeyStore: * Stores keys in a Java JCEKS KeyStore. * Is password protected and more secure than storing keys in a file in the file system. * Can store multiple keys. A key alias represents each key, making it easier to manage multiple keys. {#set-up-keystore__ul_w3y_5pd_wz} The Edge Encryption proxy ships with the Java JCEKS KeyStore file named keystore.jceks in the keystore directory. This keystore file contains the ServiceNow public key used to validate encryption rules signed by ServiceNow. |
   | Enterprise Key Management (EKM) | SafeNet KeySecure Keys are stored and retrieved with SafeNet KeySecure key management. You must secure a license with [Gemalto](http://www.gemalto.com), download the libraries, and install the SafeNet KeySecure keystore on a host machine in your network before configuring the keystore on the Edge Encryption proxy server. Unbound Technology The base64-encoded wrapped encryption key is stored as text file on the Edge Encryption proxy server. The Unbound Technology implementation (previously Dyadic Security) maintains control of the wrapping key. The Edge Encryption proxy server must run on the same machine as the Unbound technology client. |
   [ ]

   {#set-up-keystore__table_sj1_jpd_wz}  
   Hinweis:  
   If using a keystore other than the base system Java JCEKS KeyStore, you must import the ServiceNow public key into your keystore. The public key alias is servicenow.
2. Set up the keystore and encryption keys in your local network.
* **[Set up a Java KeyStore keystore](https://servicenow-prod.fluidtopics.net/_SVyXn6ai6OWPSX8nKSxnQ)**   
  You can use a Java KeyStore keystore to store encryption keys.
* **[Set up a SafeNet KeySecure keystore](https://servicenow-prod.fluidtopics.net/gqZ~EngH4ZCWh_USRAA_yw#t_SetUpNAEKeyStore)**   
  If you are using a SafeNet keystore, copy a set of libraries into the proxy distribution directory.
* **[Set up Unbound Technology keys](https://servicenow-prod.fluidtopics.net/iYL88ep1nbhjZFEub27AXg)**   
  Use Unbound Technology (previously Dyadic Security) keys with Edge Encryption by storing the base64-encoded wrapped encryption key as text file on the Edge Encryption proxy server and providing the wrapping key alias. The Unbound Technology implementation maintains control of the wrapping key.
* **[Create an encryption key stored in a file](https://servicenow-prod.fluidtopics.net/zuH_TM06CHOPD~_bYqbQAw)**   
  You can use a simple text file as a keystore. Each file holds a single encryption key.

**Vorheriges Thema:** [Import and configure the certificate for secure SSL connection](https://servicenow-prod.fluidtopics.net/a97b88eN3355v_NLmcOLwg "To use a secure SSL connection, import a server certificate and add it to the Java KeyStore.")  
**Nächstes Thema:** [Set up a Java KeyStore keystore](https://servicenow-prod.fluidtopics.net/_SVyXn6ai6OWPSX8nKSxnQ "You can use a Java KeyStore keystore to store encryption keys.")