anchor.diff:  /subsystem=elytron/key-store=httpsKS:add(path=keystore.jks,relative-to=jboss.server.config.dir,credential-reference={clear-text=secret},type=JKS)
   ----
   
  +If the keystore file does not exist yet, the following commands can be used to
  +generate an example key pair:
  +
  +[source, ruby]
  +----
  +/subsystem=elytron/key-store=httpsKS:generate-key-pair(alias=localhost,algorithm=RSA,key-size=1024,validity=365,credential-reference={clear-text=secret},distinguished-name="CN=localhost")
  +/subsystem=elytron/key-store=httpsKS:store()
  +----
  +
   [[configure-a-key-manager-in-that-references-your-key-store]]
  -==== Configure a key-manager in that references your key-store:
  +===== Configure a key-manager that references your key-store:
   
   [source, ruby]
   ----
  
positive.code: ----
  
  [[configure-a-trust-manager-in-that-references-your-truststore-key-store]]
  ==== Configure a trust-manager in that references your truststore
  key-store:
  
  [source, ruby]
  ----
  
negative.code: [[enable-one-way-ssltls-for-applications]]
  === Enable One-way SSL/TLS for Applications
  
  There are a couple ways to enable one-way SSL/TLS for deployed applications.
  
  [[one-way-ssl-applications-using-security-command]]
  ==== Using a security command:
  
  The _security enable-ssl-http-server_ command can be used to enable one-way
  SSL/TLS for deployed applications. Example of wizard usage:
  
  [source,java]
  ----
  security enable-ssl-http-server --interactive
  Please provide required pieces of information to enable SSL:
  Key-store file name (default default-server.keystore): keystore.jks
  Password (blank generated): secret
  What is your first and last name? [Unknown]: localhost
  What is the name of your organizational unit? [Unknown]:
  What is the name of your organization? [Unknown]:
  What is the name of your City or Locality? [Unknown]:
  What is the name of your State or Province? [Unknown]:
  What is the two-letter country code for this unit? [Unknown]:
  Is CN=Unknown, OU=Unknown, O=Unknown, L=Unknown, ST=Unknown, C=Unknown correct y/n [y]?
  Validity (in days, blank default): 365
  Alias (blank generated): localhost
  Enable SSL Mutual Authentication y/n (blank n): n
  
  SSL options:
  key store file: keystore.jks
  distinguished name: CN=localhost, OU=Unknown, O=Unknown, L=Unknown, ST=Unknown, C=Unknown
  password: secret
  validity: 365
  alias: localhost
  Server keystore file keystore.jks, certificate file keystore.pem and keystore.csr file
  will be generated in server configuration directory.
  Do you confirm y/n: y
  ----
  NB: Once the command is executed, the CLI will reload the server.
  
  HTTPS is now enabled for applications.
  
  [[one-way-ssl-applications-using-elytron-subsystem-commands]]
  ==== Using Elytron subsystem commands:
  
  You can also use the Elytron subsystem, along with the Undertow subsystem, to
  enable HTTPS for deployed applications.
  
  [[configure-a-key-store-in-wildfly]]
  ===== Configure a key-store in WildFly:
  
  [source, ruby]
  ----
  