Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE, Руководство администратора

Страница: 200 / 512

Chapter 7. Token Processing System
180
Parameter Description
op.format.
tokenType
.update.applet.directory The local filesystem directory where the applets
are located
op.format.
tokenType
.update.symmetricKeys.enableSpecifies if the key changeover feature should
be enabled. The valid values are
true|
false
. When enabled, TPS checks to see
the key version sent by the token matches
symmetricKeys.requiredVersion
.
op.format.
tokenType
.update.symmetricKeys.requiredVersion The required key version.
op.format.
tokenType
.revokeCert Specifies if TPS should revoke the certificates
associated with the token during this format
operation. The default is
true
. The valid values
are
true|false
.
op.format.
tokenType
.ca.conn The CA connection to use.
op.format.
tokenType
.loginRequest.enable Specifies if the login request should be
sent to the token. This parameter enables
authentication. The valid values are
true|
false
.
op.format.
tokenType
.tks.conn The TKS connection to use.
op.format.
tokenType
.auth.id The LDAP authentication instance to use. The
default value is
ldap1
.
op.format.
tokenType
.auth.enable Specifies whether to authenticate the user
information. The valid values are
true|false
.
op.format.
tokenType
.issuerinfo.enable Specifies whether the Phone Home information
for the Enterprise Security Client is set. The valid
values are
true|false
.
op.format.
tokenType
.issuerinfo.value Sets the Phone Home URL; this is the URL for
the TPS which the Enterprise Security Client will
contact for token operations; this value is set
on the token when it is formatted. For example,
https://tps.example.com:7888/cgi-
bin/home/index.cgi
.
Table 7.10. Format Operation Preferences
Parameter Description
tokendb.auditLog The full path to the audit log file. For example,
/var/lib/rpki-tps/logs/tokendb-
audit.log
.
tokendb.hostport The token database (LDAP) hostname and port
number. The format is
hostname:port
.
tokendb.bindDN The bind DN to bind to the token database. The
default value is
cn=directory manager
.
tokendb.bindPass The bind DN password.
tokendb.templateDir The directory where the templates for the TPS
agent page are located.
tokendb.userBaseDN The LDAP suffix where the user entries are.