ssl-cert-life

This stanza entry specifies the number of days in the lifetime of a certificate.

ssl-cert-life = number_days

Value for number of days in the lifetime of a certificate. Any issued or renewed certificates must use this value.

For the ivmgrd.conf configuration file, set this value with the mgrsslcfg utility to a value 1 - 7299. (The default is 1460, or four years.) The name and path are fixed for this configuration file. Use this utility to modify this value after initial configuration.

To increase or decrease the value, change the value and restart the policy server. The new value is in effect only for certificates that are issued or that are renewed from that point on. If both the certificate and the password to the key database file containing the certificate expire, the password must be refreshed first.

1. Only the policy server uses this value.
2. The password value is set with the mgrsslcfg utility.
3. Do not edit this stanza entry.

Parent topic: [ssl] stanza