Which keystore types are supported by MuleSoft for TLS in an HTTPS listener?

• A. PKCS12, JKS, PEM
• B. JKS, PEM, PFX
• C. JCEKS, JKS, BKS
• D. JCEKS, PKCS12, JKS

Answer: (D)

For TLS in an HTTPS listener, Mule uses the Java KeyStore mechanism, so the keystore formats you can select are the ones Java recognizes as keystores. The formats that Mule supports are JKS, PKCS12, and JCEKS. JKS is the traditional Java KeyStore, PKCS12 is the portable, cross‑platform standard, and JCEKS is an extension that allows stronger protection for keys via the Java Cryptography Extension. PEM, on the other hand, is a certificate/key file format, not a Java KeyStore type, so it isn’t used directly as the keystore for the TLS listener. Therefore, the valid set is JCEKS, PKCS12, and JKS.