OpenRG Certificate Stores

OpenRG maintains two certificate stores:

1. OpenRG Local Store
   This store contains a list of approved certificates that are used to identify OpenRG to its clients. The list also includes certificate requests that are pending a CA's endorsement.
   You can obtain certificates for OpenRG using the following methods:
   • Requesting an X509 Certificate
     This method creates both a private and a matching public key. The public key is then sent to the CA to be certified.
   • Creating a Self-Signed Certificate
     This method is the same as requesting a certificate, only the authentication of the public key does not require a CA. This is mainly intended for use within small organizations.
   • Loading a PKCS#12 Format Certificate
     This method loads a certificate using an already available and certified set of private and public keys.
2. Certificate Authority (CA) Store
   This store contains a list of the trusted certificate authorities, which is used to check certificates presented by OpenRG clients.