PKCS#11 Trust Manager Provider

The PKCS#11 Trust Manager Provider enables the server to manage trust information through the PKCS11 interface

This standard interface is used by cryptographic accelerators and hardware security modules.

Parent

The PKCS#11 Trust Manager Provider object inherits from Trust Manager Provider.

Basic Properties

enabled

SynopsisIndicate whether the Trust Manager Provider is enabled for use.
Default Value

None

Allowed Values

true

false

Multi-valued

No

Required

Yes

Admin Action Required

None

Advanced

No

Read-Only

No

trust-store-pin

SynopsisSpecifies the clear-text PIN needed to access the PKCS#11 Trust Manager Provider .
Default Value

None

Allowed Values

A string.

Multi-valued

No

Required

No

Admin Action Required

None

Changes to this property will take effect the next time that the PKCS#11 Trust Manager Provider is accessed.

Advanced

No

Read-Only

No

trust-store-type

SynopsisSpecifies the type of PKCS#11 trust manager, when the specific name must be explicit.
Description. If no type is specified, the default value of "PKCS11" will be used.
Default Value

PKCS11

Allowed Values

Any PKCS#11 key store format supported by this Java runtime environment.

Multi-valued

No

Required

No

Admin Action Required

Restart the server for changes to take effect.

Advanced

No

Read-Only

No

Advanced Properties

Use the --advanced option to access advanced properties.

java-class

SynopsisThe fully-qualified name of the Java class that provides the PKCS#11 Trust Manager Provider implementation.
Default Value

org.opends.server.extensions.Pkcs11TrustManagerProvider

Allowed Values

A Java class that extends or implements:

  • org.opends.server.api.TrustManagerProvider

Multi-valued

No

Required

Yes

Admin Action Required

None

Advanced

Yes

Read-Only

No

Read a different version of :