--- title: HTTPS Setup (JKS/PEM) (cloned) slug: docuflow-guides/https-setup-jkspem-cloned createdAt: 2022-01-12T19:00:15.000Z --- # JKS Docuflow supports utilizing the JKS format for it's web services API. If you are not familiar with java key stores you can learn more about them [here](https://en.wikipedia.org/wiki/Java_KeyStore). In most cases inside a keystore a private key is accompanied by the corresponding public key certificate. To view the certificates currently installed in your docuflow middleware for web services you can view the JKS file using a key store viewer such as [https://keystore-explorer.org/](https://keystore-explorer.org/) Once downloaded you can open the "keystore.jks" file using the password !DFLOW! to open the JKS file. The JKS file is located at **C:\\\\config\certificates\keystore.jks** For information on **trusted certificates** and importing them you can visit the following link [https://keystore-explorer.org/doc/5.4/trustedCertificates.html](https://keystore-explorer.org/doc/5.4/trustedCertificates.html) For information on using a generated key-pair certificate you can visit the following link [http://keystore-explorer.org/doc/5.4/keyPairs.html#generate-a-key-pair](http://keystore-explorer.org/doc/5.4/keyPairs.html#generate-a-key-pair) Alternatively you can utilize pem and cer files for enrypting the docuflow web service. Upon any changes of the JKS the service must be restarted. # PEM/CER To enable docuflow to use the following formats you must add to the ini file **cert.type = pem** under \[General Preferences]. **Using a generated private key file in pkcs8 format for the server and place in the config folder of the docuflow instance.** ```Text * Using openssl and your private key this is created by: * openssl pkcs8 -topk8 -inform pem -in your_private_key.pem -outform pem -nocrypt -out your_private_key_pkcs8.pem ``` ** Generating the public certifcate for the server. Place in the config folder of the docuflow instance.** ```Text * * openssl req -new -x509 -key your_private_key.pem -out your_public.cer -days 3650 * ``` Update Config.properties and remove the default values for content.cer.file and content.pem.file with the ones generaged above. Save the file and restart the service. content.cer.file=your\_public.cer content.pem.file=your\_private\_key\_pkcs8.pem