Which type of certificate requires the uploading of a keystore (.jks) file in Oracle Integration Cloud to facilitate two-way SSL communication with…

In Oracle Integration Cloud (OIC), an Identity Certificate is required for two-way SSL (also known as mutual TLS or mTLS) communication. When OIC acts as a client calling an external service that requires client authentication, OIC must present its own certificate to prove its identity. This identity certificate, along with its corresponding private key, is packaged and uploaded as a Java KeyStore (.jks) file. This allows the external service to verify OIC's identity, completing the mutual authentication handshake.

A. Unified Communications Certificate: This is a type of SSL certificate (like a SAN certificate) used to secure multiple hostnames, not the specific functional category used in OIC for client authentication.

B. Multi Domain Certificate: Similar to a Unified Communications Certificate, this is a commercial certificate type, not the classification used within the OIC security configuration for this specific function.

D. Message Protection Certificate: This certificate type is used for message-level security, such as digitally signing or encrypting the payload of a message (e.g., WS-Security), not for transport-level SSL/TLS authentication.

---

1. Oracle Official Documentation - Using Integrations in Oracle Integration 3: In the section on managing security certificates

the documentation explicitly defines the purpose of an Identity Certificate. It states

"Select this option to upload a keystore file with an identity certificate and private key for two-way SSL communication. The keystore must be in JKS format."

Source: Oracle Help Center

Using Integrations in Oracle Integration 3

Chapter: Manage Security

Section: Manage Security Certificates

Subsection: Upload a Certificate.

2. Oracle Official Documentation - Oracle Integration Generation 2: The documentation for the previous generation of OIC also confirms this distinction. It describes the three types of certificates that can be uploaded: Trust

Identity

and Message Protection

with the Identity certificate being the one used for two-way SSL and requiring a JKS keystore.

Source: Oracle Help Center

Using Integrations in Oracle Integration Generation 2

Chapter: Manage Security

Section: Upload a Certificate.