MSCAPI has a bundle of new keystore types which is not file-based and password-protected. Security tools like keytool and jarsigner should know these features to work with them smoothly.