With the following information you will learn how to provide certificate storage for your device.

Using JVM default storage (default)

If you don't want to provide a special external storage for your certificates, the Certificate Manager will use the java cacerts storage by default. Its location is:

• JAVA_HOME/jre/lib/security/cacerts

For more information refer to https://docs.oracle.com/cd/E19830-01/819-4712/ablqw/index.html.

Using external storage implementation

To provide an external place for storing your certificates, you have to setup the framework's Certificate Manager according the following prerequisites:

1. Edit the default.prs file, located in ../runtime/osgi/bin/vms/jdk folder or the common.prs file from ../runtime/osgi/bin/vms to add the following two lines:
   • mbs.keystore.class=com.prosyst.mbs.impl.framework.module.certmanager.certstorage.ExtFolderCertificateStorageImpl
   • mbs.certificate.root=../../../certsStorage

   This first step shows the ONVIF driver where to look for certificates. Once you define the location, copy the certificates there, as described in the following steps.

2. Create the new certsStorage folder in ../runtime/osgi – ../runtime/osgi/certsStorage.
3. Place the certificate in the new ../runtime/osgi/certsStorage folder.

As a result the framework's Certificate Manager is set up for using external storage for the certificates. For details refer to Certificate Manager Service and Certificate and Signature Properties of the Framework module. Additional information about the process is provided in Validation of Camera Certificate.