`:top
A `!Java KeyStore`! (`!JKS`!) is a `F33f`_`[repository`:/page/wikibook/entry.mu`zim=wikipedia_en_all_nopic_2025-08.zim|entry_path=Content_repository]`_`f of security certificates – either `F33f`_`[authorization certificates`:/page/wikibook/entry.mu`zim=wikipedia_en_all_nopic_2025-08.zim|entry_path=Authorization_certificate]`_`f or `F33f`_`[public key certificates`:/page/wikibook/entry.mu`zim=wikipedia_en_all_nopic_2025-08.zim|entry_path=Public_key_certificate]`_`f – plus corresponding `F33f`_`[private keys`:/page/wikibook/entry.mu`zim=wikipedia_en_all_nopic_2025-08.zim|entry_path=Private_key]`_`f, used for instance in `F33f`_`[TLS encryption`:/page/wikibook/entry.mu`zim=wikipedia_en_all_nopic_2025-08.zim|entry_path=Transport_Layer_Security]`_`f.
In `F33f`_`[IBM WebSphere Application Server`:/page/wikibook/entry.mu`zim=wikipedia_en_all_nopic_2025-08.zim|entry_path=IBM_WebSphere_Application_Server]`_`f and `F33f`_`[Oracle WebLogic Server`:/page/wikibook/entry.mu`zim=wikipedia_en_all_nopic_2025-08.zim|entry_path=Oracle_WebLogic_Server]`_`f, a file with extension `*jks`* serves as a keystore.
The `F33f`_`[Java Development Kit`:/page/wikibook/entry.mu`zim=wikipedia_en_all_nopic_2025-08.zim|entry_path=Java_Development_Kit]`_`f maintains a `F33f`_`[CA`:/page/wikibook/entry.mu`zim=wikipedia_en_all_nopic_2025-08.zim|entry_path=Certificate_authority]`_`f keystore file named `*cacerts`* in folder `*jre/lib/security`*. JDKs provide a tool named `*keytool`*`:cite-ref-1[`F5bf`_`[1`#cite-note-1]`_`f] to manipulate the keystore. `*keytool`* has no functionality to extract the private key out of the keystore, but this is possible with third-party tools like jksExportKey, CERTivity,`:cite-ref-2[`F5bf`_`[2`#cite-note-2]`_`f] Portecle`:cite-ref-3[`F5bf`_`[3`#cite-note-3]`_`f] and KeyStore Explorer.`:cite-ref-4[`F5bf`_`[4`#cite-note-4]`_`f]
>>Contents
• `F0af`_`[See also`#see-also]`_`f
• `F0af`_`[References`#references]`_`f
• `F0af`_`[External links`#external-links]`_`f
-─
>>See also
• `F33f`_`[Java Secure Socket Extension`:/page/wikibook/entry.mu`zim=wikipedia_en_all_nopic_2025-08.zim|entry_path=Java_Secure_Socket_Extension]`_`f
• `F33f`_`[Keyring (cryptography)`:/page/wikibook/entry.mu`zim=wikipedia_en_all_nopic_2025-08.zim|entry_path=Keyring_(cryptography)]`_`f
• `F33f`_`[Public key infrastructure`:/page/wikibook/entry.mu`zim=wikipedia_en_all_nopic_2025-08.zim|entry_path=Public_key_infrastructure]`_`f
>>References
`:cite-note-1`!1.`! `F0af`_`[↑`#cite-ref-1]`_`f The `*keytool`* Command - a key and certificate management utility
`:cite-note-2`!2.`! `F0af`_`[↑`#cite-ref-2]`_`f CERTivity - A multi-platform visual tool for managing keystores
`:cite-note-3`!3.`! `F0af`_`[↑`#cite-ref-3]`_`f Portecle - Portecle is an open-source GUI application for creating, managing and examining keystores.
`:cite-note-4`!4.`! `F0af`_`[↑`#cite-ref-4]`_`f KeyStore Explorer - An open source GUI replacement for the Java command-line utilities keytool, jarsigner and jadtool.
>>External links
• Javadoc for KeyStore
`c`F0af`_`[↑ Back to top`#top]`_`f`a