IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

Indicates
whether
automatic
refresh
of
the
SSL
certificate
and
the
key
database
file
password
occur.
Valid
values
are:
yes
Automatic
refresh
is
enabled.
When
enabled,
the
certificate
and
password
are
regenerated
if
either
is
in
danger
of
expiration
(less
than
half
the
time
left).
This
value
is
the
default
value.
no
Turn
off
automatic
certificate
and
password
refresh.
This
stanza
entry
is
required
only
when
SSL
is
enabled.
Default
value:
yes
Example:
ssl-auto-refresh
=
yes
ssl-listening-port
=
{0|port_number}
TCP
port
to
listen
on
for
incoming
requests.
Valid
values
are:
0
Disables
listening.
The
default
value
is
0
if
not
specified
during
configuration.
port_number
Enables
listening
at
the
specified
port
number.
The
valid
range
for
port
numbers
is
any
positive
number
that
is
allowed
by
TCP/IP
and
is
not
currently
being
used
by
another
application.
This
stanza
entry
is
required
only
when
SSL
is
enabled.
The
default
value
is
supplied
by
the
WebSEAL
configuration
utility,
and
is
dependent
on
the
available
TCP/IP
ports.
A
typical
value
during
WebSEAL
configuration
is
7234.
Example:
ssl-listening-port
=
7234
ssl-pwd-life
=
number_of_days
Password
lifetime
for
the
key
database
file,
specified
in
the
number
of
days.
For
automatic
password
renewal,
the
value
for
the
lifetime
of
a
password
is
controlled
by
the
number_of_days
value
when
the
server
is
started.
Note:
If
a
certificate
and
the
password
to
the
keyring
database
file
containing
that
certificate
are
both
expired,
then
the
password
must
be
refreshed
first.
Valid
values
for
the
number_of_days
is
from
1
to
7,299
days.
This
stanza
entry
is
required
only
if
SSL
is
enabled.
Default
value:
183
Example:
ssl-pwd-life
=
183
ssl-authn-type
=
authentication_type
Type
of
authentication.
This
stanza
entry
is
required
only
when
SSL
is
enabled.
Default
value:
certificate
Example:
ssl-authn-type
=
certificate
412
IBM
Tivoli
Access
Manager
for
e-business:
WebSEAL
Administration
Guide