---
schema_version: "1"
id: b07818b219b8c53520a0534821d39ac1d80d1a778b5cb693dce299d9010cec0a
title: Managing AS2 Host Keystores
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/partner-manager/latest/manage-as2-host-keystores.md
canonical_url: https://docs.mulesoft.com/partner-manager/latest/manage-as2-host-keystores
source_site: docs.mulesoft.com
content_type: documentation
content_hash: 0ac14bda4739ccf3cdc9c04d57d348fcf2f37f4c09a3c32f09b2b70730b3c2c5
description: MuleSoft Documentation Site
release: 2.x
latest: true
---
---
product: Partner Manager
version: 2.x
is-latest-version: true
---

# Managing AS2 Host Keystores

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

AS2 host keystores consist of a public certificate and private key. Configure at least one AS2 host
keystore if you use AS2 endpoints.

## Create an AS2 Host Keystore

To create an AS2 host keystore:

1.  In the sidebar, access the **<host>** page.

2.  In the **Certificates** section, click **New**.

3.  In the **Certificate Type** field, select **Private Keypair**.

4.  In the **Keystore Name** field, enter the name of the keystore file to store your organization’s
    private key.

5.  In the **<host> Public Certificate** field, click **Choose file** to select a public
    certificate.

6.  In the **<host> Private Key File** field, click **Choose file** to select a key file.

7.  In the **Key Passphrase** field, enter a passphrase for protecting the private key.

## Update an AS2 Host Keystore

When the certificate for your AS2 keystore is about to expire, perform the following steps to obtain
a new one. You can update the keystore in a non-production environment and coordinate when to make
the change in production with your partners.

1.  Depending on your organization’s policies, create a self-signed certificate and key pair, or
    obtain a new AS2 certificate from your certificate authority.

2.  Define a date on which you plan to switch to the new certificate.

3.  Share the new public certificate with your AS2 partners to give them sufficient lead time to
    plan the certificate switch on their side.

When it’s time to update the keystore with the new certificate, follow these steps:

1.  In the sidebar, access the **<host>** page.

2.  In the **Certificates** section, click the keystore to update and then click **Edit**.

3.  In the **<host> public certificate** field, click **Choose file**, navigate to the updated
    public certificate, and click **Open**.

4.  In the **<host> private key file** field, click **Choose file**, navigate to the private key
    file, and click **Open**.

5.  In the **Key passphrase** field, enter the passphrase for the new keystore.

6.  Click **Update keystore**.

7.  After the keystore updates, do either of the following:

    - If you have only one AS2 Receive from Partners or Send to Partners endpoint that uses the
      keystore, open one message flow that references the endpoint and redeploy the flow.

    - If you have more than one AS2 Receive from Partners or Send to Partners endpoint that uses the
      keystore, redeploy one message flow for each endpoint that uses the keystore.

    Anypoint Partner Manager updates the inbound and outbound AS2 applications in the runtime. The
    update can take up to 10 minutes to complete.

## Remove an AS2 Host Keystore

You can remove an AS2 host keystore from Partner Manager if it isn’t associated with an endpoint.
You cannot delete a host keystore if it is the only keystore that is uploaded to Partner Manager.

To remove an AS2 host keystore:

1.  In the sidebar, access the **<host>** page.

2.  In the **Certificates** section, click the keystore certificate to remove.

3.  Click **Delete**.

## See Also

- [Certificate and Keystore Storage](https://docs.mulesoft.com/partner-manager/latest/certificates)

- [AS2 Receive Endpoint Settings](https://docs.mulesoft.com/partner-manager/latest/endpoint-as2-receive)

- [AS2 Send Endpoint Settings](https://docs.mulesoft.com/partner-manager/latest/endpoint-as2-send)

- [Managing Host Certificates](https://docs.mulesoft.com/partner-manager/latest/manage-host-certificates)