I have a .p12 file. I converted this this a .pem file. openssl pkcs12 -in my.p12 -out mynew.pem -passin pass:custpasswo I then created the trust store with the .pem files created previously curl -X POST -H "Content-Type: text/xml" -d '<KeyStore name=“my-store"/>' https://api.enterprise.apigee.com/v1/organizations/{myorg}/environments/{mye}/keystores. I then uploaded the file curl -X POST -H "Content-Type: multipart/form-data" -F file="@mypemfile.pem" https://api.enterprise.apigee.com/v1/organizations/{myorg}/environments/{mye}/keystores/my-store/cer.... I added is to my Target definition <SSLInfo> <Enabled>true</Enabled> <ClientAuthEnabled>true</ClientAuthEnabled> <KeyStore>my-store</KeyStore> <KeyAlias>my-store-alias</KeyAlias> <TrustStore>my-store</TrustStore> </SSLInfo> I am unable to deploy this with error "Target default has invalid keyalias reference my-store-alias."