I need to use the Java BCFKS keystore in a system where multiple thick clients need to share symmetric keys. I'm pretty new to this, and was wondering what is considered best practice for that. Copy the keystore around? Put the keystore on a network share or a server and load via KeyStore's load(InputStream) method?
If my users also need personal keys, can I load a second BCFKS from the local file system?