Thus, javakey is also used to build and manage a persistent database of entities and their keys and certificates, as well as indications as to whether or not each entity is considered trusted. An identity may also have associated with it one or more certificates authenticating its public key. Signers are entities that have private keys in addition to corresponding public keys.
Private keys differ from public keys in that they can be used for signing.
Prior to signing any files, a signer must have a public and private key pair associated with it, and at least one certificate authenti- cating its public key. Similarly, you can either import existing certificates or generate new ones. Subsequent javakey commands must use this same username to refer to the entity. That is, such applets are not subject to the sandbox restrictions of the original Java security model. Later releases will provide greater detail in the allowable trust levels.