From ddc7e6e33d94361b0f7fb50d0cbd10790a357a02 Mon Sep 17 00:00:00 2001 From: Xiangjiaox <35294265+Xiangjiaox@users.noreply.github.com> Date: Wed, 10 Nov 2021 11:30:27 +0100 Subject: [PATCH] KEYCLOAK-15015 Extend KeyWrapper to add whole certificate chain in x5c parameter (#1144) Co-authored-by: Vetle Bergstad Co-authored-by: Stian Thorgersen --- server_admin/topics/realms/keys.adoc | 2 ++ 1 file changed, 2 insertions(+) diff --git a/server_admin/topics/realms/keys.adoc b/server_admin/topics/realms/keys.adoc index a39e093520..d17ae6ad99 100644 --- a/server_admin/topics/realms/keys.adoc +++ b/server_admin/topics/realms/keys.adoc @@ -76,6 +76,8 @@ the priority to make sure the new keypair becomes the active keypair. To add a keypair and certificate stored in a Java Keystore file on the host select `Providers` and choose `java-keystore` from the dropdown. You can change the priority to make sure the new keypair becomes the active keypair. +For the associated certificate chain to be loaded it must be imported to the Java Keystore file with the same `Key Alias` used to load the keypair. + .Procedure . Select the realm in the Admin Console. . Click *Realm settings*.