Tks Configuration File Parameters - Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual

Parameter
tokendb.defaultPolicy
Table 8.11. Token Database Preferences

8.9.1. TKS Configuration File Parameters

There are several parameters which should be set in the TKS configuration file to use the TPS for
server-side key generation and for key updates. These are listed in
Parameters for Key Generation"
Parameter
tks.drm_transport_cert_nickname= DRM
Transport nickname
Table 8.12. TKS Configuration Parameters for Key Generation
Parameter
tks.mk_mappings.#01#01=tokenname:nickname
tks.mk_mappings.#02#01=tokenname:nickname
Table 8.13. TKS Configuration Parameters for Key Update
Description
• tokendb.doTokenTemplate
• tokendb.doTokenConfirmTemplate
• tokendb.revokeTemplate
• tokendb.editAdminTemplate
• tokendb.editAdminResultTemplate
• tokendb.searchAdminTemplate
• tokendb.searchAdminResultTemplate
The default policy to use. The valid values are
PIN_RESET=YES|NO; and RE_ENROLL=YES|
NO;.
Table 8.13, "TKS Configuration Parameters for Key
and
Description
The DRM transport certificate nickname. This
needs to be set to enable server-side key
generation.
Description
The version 1 master key nickname.
The version 2 master key nickname.
TKS Configuration File Parameters
Table 8.12, "TKS Configuration
NOTE
Master keys are generated using the
tksTool utility. The version 1 key
set is the default set by the smart
card manufacturer. Smart cards can
optionally be upgraded to the version
2 key set.
Update".
215