Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual page 224

Chapter 8. Token Processing System
Parameter
conn.can.SSLOn
conn.can.keepAlive
Table 8.2. CA Connection Settings
Parameter
conn.tksn.hostport
conn.tksn.clientNickname
conn.tksn.retryConnect
conn.tksn.SSLOn
conn.tksn.keepAlive
conn.tksn.serverKeygen
conn.tks1.servlet.computeSessionKey
conn.tks1.servlet.createKeySetData
conn.tks1.servlet.encryptData
Table 8.3. TKS Connection Settings
Parameter
conn.drmn.hostport
conn.drmn.clientNickname
202
Description
Sets if SSL needs to be turned on to connect to
the CA. This value must be true.
Sets whether to keep the connection to the CA
alive or terminate it after every operation. The
valid values are true|false.
Description
The TKS subsystem hostname and port number.
The format is hostname:port. This should be the
TKS's agent port.
The client certificate nickname to use. This
certificate is used by the TPS when connecting to
the TKS. This client certificate should be trusted
by the TKS, and the client should be a configured
TKS agent.
The number of times the TPS tries to reconnect
to the TKS after a connection attempt fails. The
valid values are integers. For example, 3.
Sets whether SSL needs to be turned on for the
connection to the TKS. This value must be true.
Sets whether to keep the connection to the TKS
alive or terminate it after every operation. The
valid values are true|false.
Sets where key generation happens. When set
to true, key generation happens on the server.
When set to false, key generation happens on
the client, or token.
The servlet to compute session key for the
secure channel; for example, /tks/agent/
tks/computeSessionKey.
The servlet to create key set data; for example,
/tks/agent/tks/createKeySetData. This
servlet is used for key upgrade.
The servlet which encrypts data with token's
KEK key; for example, /tks/agent/tks/
encryptData.
Description
The DRM subsystem hostname and port number.
The format is hostname:port This should be the
DRM agent port.
The client certificate nickname to use. This
certificate is used by TPS when connecting to the
DRM. This client certificate should be trusted by