Managing the Trusted RSA Key Registry
The XML signature of an inbound SAML Assertion for XUA messaging can include a RSA public key in lieu of an entire X.509 certificate. If you use an RSA public key for inbound SAML Assertions, you must add it to the Trusted RSA Key Registry.
To add a key to the Trusted RSA Key Registry:
-
Log in to the Management Portal as a user with the %HS_Administrator role.
-
Select your Foundation namespace.
-
Select Health > IHE Configuration > Trusted RSA Key Registry.
-
Select an entry from the table to edit an existing entry or select Add Trusted Key to create a new one.
-
Enter appropriate values in the various settings and select Save. The settings are described below.
AliasRequired.
Public Key Modulus (Base64 encoded)Required.
Public Key Exponent (Base64 encoded)Required.