#Overview

The X.509 Store Service manages the peristence of X.509 certificates inside the Enterprise resource tree. It supports both generic certificate entries and VICAL entries for IACA certificates.

The service can be used directly through the Enterprise API, attached to the X.509 Certificate Service so issued certificates are persisted automatically, attached to the VICAL Service as a source of publishable IACA entries, or attached to the Credential Status Service and Verifier2 Service so those services can resolve x5cReferences to stored PEMs.

#Service Dependencies

The X.509 Store Service does not require dependency services to operate. It can, however, be attached as a dependency of the X.509 Certificate Service so generated certificates — including IACA, Document Signer, and ETSI Provider / Wallet Relying Party certificates — are stored automatically.

• The X.509 Certificate Service so generated IACA and Document Signer certificates are stored automatically.
• The VICAL Service. Each VICAL publication reads all attached stores and includes every valid certificate with attribute metadata.vicalDocType set.
• The Credential Status Service so status configurations can pass x5cReferences.
• The Verifier2 Service so service or session create can pass x5cReferences.

#Core Features

• Store generic X.509 certificates entries.
• Store IACA certificates with additional metadata to create VICAL (Verified Issuer Certificate Authority List).
• List full stored entries or just stored certificate IDs.
• Read, update, and delete stored certificates by full target path.
• Act as a persistence target for X.509 issuance and as trust-material input for VICAL publication.

#Get Started

• Setup - Create an X.509 Store service and optionally attach it to an X.509 Certificate Service.
• Manage Certificates - Add, list, read, update, and delete stored certificates.