---
schema_version: "1"
id: 73aeb31c353dfe21a3ae32299673eef79c44ad6d3954f1aa9f091455446b8271
title: Supported Secret Types Reference
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/anypoint-security/asm-secret-type-support-reference.md
canonical_url: https://docs.mulesoft.com/anypoint-security/asm-secret-type-support-reference
source_site: docs.mulesoft.com
content_type: documentation
content_hash: 0594d2764769da48717da71118d5e5c9117c6ad91007f68e5e3a355096f45e9f
description: MuleSoft Documentation Site
latest: true
---
---
product: Security
version: master
---

# Supported Secret Types Reference

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

## Simple Secret Types

<table><colgroup><col> <col></colgroup><thead><tr><th>Secret Type</th><th>Description</th></tr></thead><tbody><tr><td><div><div><p>Shared Secret</p></div></div></td><td><div><div><p>This security object contains a username and password or a base64-encoded symmetric key.<br>The shared secret is used for symmetric encryption and decryption in situations in which the secret is known by both the message sender and the message recipient. The sender uses the key to encrypt and sign the message. The recipient uses the key to decrypt the message and verify a message’s digital signature.</p></div><div><p>The secrets manager enables an administrator to define one of a static username and password combination, a static symmetric key, an S3 bucket, or blobs.</p></div></div></td></tr><tr><td><div><div><p>Certificate</p></div></div></td><td><div><div><p>This security object contains an X.509 certificate and an electronic document that uses a digital signature to bind a public key with an identity.<br>The secrets manager supports PEM and JKS certificates.</p></div></div></td></tr></tbody></table>

## Secret Types Used in TLS and SSL Communication

<table><colgroup><col> <col></colgroup><thead><tr><th>Secret Type</th><th>Description</th></tr></thead><tbody><tr><td><div><div><p>Keystore</p></div></div></td><td><div><div><p>A keystore is a repository of security certificates (either authorization certificates or public key certificates), plus corresponding private keys used, for example, in SSL encryption.</p></div><div><p>Secrets manager accepts both keys and certificates signed by RSA and EdDSA (ED448 and ED25519).</p></div><div><p>Supported keystore types are:</p></div><div><ul><li><p>JKS</p></li><li><p>JCEKS</p></li><li><p>PEM</p></li><li><p>PKCS12</p></li></ul></div></div></td></tr><tr><td><div><div><p>Truststore</p></div></div></td><td><div><div><p>A truststore is a repository of security certificates from other parties with which you expect to communicate, or from Certificate Authorities that you trust to identify other parties.</p></div><div><p>Secrets manager accepts truststores with expired certificates.</p></div><div><p>The secrets manager truststore accepts the following standard input formats:</p></div><div><ul><li><p>PEM</p></li><li><p>JKS</p></li><li><p>PKCS12</p></li><li><p>JCEKS</p></li></ul></div></div></td></tr><tr><td><div><div><p>Certificate Pinset</p></div></div></td><td><div><div><p>A Certificate Pinset is a repository of security certificates from other parties that associate a client or host with their expected X.509 certificate or public key. These security certificate identities are then "pinned" to clients or hosts.<br>This repository or "Pin Set" acts as a list of certificates that can be used, for example, to identify clients in a SSL/TLS connection. The secrets manager accepts a concatenated list of PEM certificates as input.</p></div></div></td></tr><tr><td><div><div><p>TLS Context</p></div></div></td><td><div><div><p>This security object defines all SSL critical security parameters.</p></div></div></td></tr></tbody></table>

## See Also

- [Secrets Manager](https://docs.mulesoft.com/anypoint-security/index-secrets-manager)

- [Secret Groups](https://docs.mulesoft.com/anypoint-security/asm-secret-group-concept)

- [Secrets Manager Permissions](https://docs.mulesoft.com/anypoint-security/asm-permission-concept)