There is wrong default *relative-to* path for CredentialStore, is set to folder from which we started EAP server. ----------------------------------------------------------------------------------------------------------------- Key: WFCORE-2527 URL: https://issues.jboss.org/browse/WFCORE-2527 Project: WildFly Core Issue Type: Bug Components: Security Reporter: Hynek Švábek Assignee: Darran Lofthouse Priority: Critical There is set wrong default *relative-to* path for CredentialStore. Default *relative-to* path is set to folder from which we started EAP server. e.g.: * cd EAP_FOLDER * ./bin/standalone.sh * relative-to is se to EAP_FOLDER or * cd EAP_FODER/bin * ./standalone.sh * relative-to is se to EAP_FOLDER/bin *How to reproduce* {code} /subsystem=elytron/credential-store=cs007:add(uri="cr-store://test/keystorecs007.jceks?create=true", credential-reference= {clear-text=pass123}) {code} {code} /subsystem=elytron/credential-store=cs007/alias=newCs007:add(secret-value=Elytron) {code} Now you can see in EAP_FOLDER (it can be different, see above) keystorecs007.jceks file. I would expect this file in data directory of server.