FAQ Tag: keystore

How do I define new signing and encryption key for SAML to use instead of the default one?

The out-of-the-box signing and encryption key named only4test must not be used in production for generating new metadata for the setup of SAML authentication. A new key pair with long-term (e.g. 10 years) validity must be generated and stored into the ${MUSE_HOME}/proxy/webcontexts/ssoRWP/WEB-INF/classes/security/samlKeystore.jks keystore. Oracle Java keytool or other Certificate Management GUI tools such as CERTivity…

How can I configure a SSL certificate for Muse Proxy?

We strongly recommend to access the Muse Proxy service securely over HTTPS. This is required because almost all content vendor platforms accessed through Muse Proxy rewriting are using the secure protocol, and the same level of security must be matched by Muse Proxy as well. Furthermore, the rewriting of some platforms may not work without…