Нужно определиться, с каким форматом вы работаете: pfx или HDIMAGE.

The user keystore is by default stored in a file named .keystore in the user's home directory, as determined by the user.home system property whose default value depends on the operating system:

Solaris, Linux, and MacOS: /home/username/
Windows: C:\Users\username\

Of course, keystore files can be located as desired. In some environments, it may make sense for multiple keystores to exist. For example, one keystore might hold a user's private keys, and another might hold certificates used to establish trust relationships.

In addition to the user's keystore, the JDK also maintains a system-wide keystore which is used to store trusted certificates from a variety of Certificate Authorities (CA's). These CA certificates can be used to help make trust decisions. For example, in SSL/TLS/DTLS when the SunJSSE provider is presented with certificates from a remote peer, the default trustmanager will consult one of the following files to determine if the connection is to be trusted:

Solaris, Linux, and MacOS: <java-home>/lib/security/cacerts
Windows: <java-home>\lib\security\cacerts

Instead of using the system-wide cacerts keystore, applications can set up and use their own keystores, or even use the user keystore described above.

Это был всего лишь пример, что это можно делать, особенно для кастомных реализаций JCA, а не храдкодить пути до системного хранилища, если уж так хотите вот официальная инфрормация