One of the duties I've been recently assigned is to keep track of the SSL certificates used by the application servers I support. These are managed by external group mainly but internal to our department I'd like to have some way of storing them securely other than just on the server just as a precaution. I'd also like to keep track of when they expire, etc.

I've considered a key database (using some certificate tool like IBM Key Manager), or keeping them on an encrypted drive.

What I would like our suggestions for the best way to handle SSL certificates that doesn't risk exposing them to non-authorized individuals?

closed as off-topic by Shane Madden, joeqwerty, mdpc, MadHatter, Tim Brigham Jan 13 '14 at 18:10

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions seeking product, service, or learning material recommendations are off-topic because they tend to become obsolete quickly. Instead, describe your situation and the specific problem you're trying to solve." – joeqwerty, mdpc, MadHatter, Tim Brigham
If this question can be reworded to fit the rules in the help center, please edit the question.


I keep them in a git tree in a safe place. Where safe place can be an encrypted drive, or a machine only accessible by authorized people.

Not the answer you're looking for? Browse other questions tagged or ask your own question.