File Based Key Manager Provider

The File Based Key Manager Provider can be used to obtain the server certificate from a key store file on the local file system.

Multiple file formats may be supported, depending on the providers supported by the underlying Java runtime environment.

Parent

The File Based Key Manager Provider object inherits from Key Manager Provider.

Properties

Use the --advanced option to access advanced properties.

Basic Properties

enabled

SynopsisIndicates whether the Key Manager Provider is enabled for use.
Default ValueNone
Allowed Valuestrue
false
Multi-valuedNo
RequiredYes
Admin Action RequiredNone
AdvancedNo
Read-OnlyNo

key-store-file

SynopsisSpecifies the path to the file that contains the private key information. This may be an absolute path, or a path that is relative to the OpenDJ instance root.
DescriptionChanges to this property will take effect the next time that the key manager is accessed.
Default ValueNone
Allowed ValuesA path to an existing file that is readable by the server.
Multi-valuedNo
RequiredYes
Admin Action RequiredNone
AdvancedNo
Read-OnlyNo

key-store-pin

SynopsisSpecifies the clear-text PIN needed to access the File Based Key Manager Provider .
Default ValueNone
Allowed ValuesA string.
Multi-valuedNo
RequiredNo
Admin Action RequiredNone
Changes to this property will take effect the next time that the File Based Key Manager Provider is accessed.
AdvancedNo
Read-OnlyNo

key-store-pin-environment-variable

SynopsisSpecifies the name of the environment variable that contains the clear-text PIN needed to access the File Based Key Manager Provider .
Default ValueNone
Allowed ValuesThe name of a defined environment variable that contains the clear-text PIN required to access the contents of the key store.
Multi-valuedNo
RequiredNo
Admin Action RequiredNone
Changes to this property will take effect the next time that the File Based Key Manager Provider is accessed.
AdvancedNo
Read-OnlyNo

key-store-pin-file

SynopsisSpecifies the path to the text file whose only contents should be a single line containing the clear-text PIN needed to access the File Based Key Manager Provider .
Default ValueNone
Allowed ValuesA path to an existing file that is readable by the server.
Multi-valuedNo
RequiredNo
Admin Action RequiredNone
Changes to this property will take effect the next time that the File Based Key Manager Provider is accessed.
AdvancedNo
Read-OnlyNo

key-store-pin-property

SynopsisSpecifies the name of the Java property that contains the clear-text PIN needed to access the File Based Key Manager Provider .
Default ValueNone
Allowed ValuesThe name of a defined Java property.
Multi-valuedNo
RequiredNo
Admin Action RequiredNone
Changes to this property will take effect the next time that the File Based Key Manager Provider is accessed.
AdvancedNo
Read-OnlyNo

key-store-type

SynopsisSpecifies the format for the data in the key store file.
DescriptionValid values should always include 'JKS' and 'PKCS12', but different implementations may allow other values as well. If no value is provided, the JVM-default value is used. Changes to this configuration attribute will take effect the next time that the key manager is accessed.
Default ValueNone
Allowed ValuesAny key store format supported by the Java runtime environment.
Multi-valuedNo
RequiredNo
Admin Action RequiredNone
AdvancedNo
Read-OnlyNo

Advanced Properties

java-class

SynopsisThe fully-qualified name of the Java class that provides the File Based Key Manager Provider implementation.
Default Valueorg.opends.server.extensions.FileBasedKeyManagerProvider
Allowed ValuesA Java class that extends or implements:
org.opends.server.api.KeyManagerProvider
Multi-valuedNo
RequiredYes
Admin Action RequiredThe object must be disabled and re-enabled for changes to take effect.
AdvancedYes
Read-OnlyNo