ssl-keyfile
This stanza entry specifies the file name and location on the local system of the SSL key file.
ssl-keyfile = key-path
File name and location on the local system of the SSL key file. If the key-value pair does not exist in the configuration file, the application fails. The file extension can be anything, but it is usually .kdb. By default, the key file is in one of the following operating system-specific directories:
- AIX, Linux, and Solaris operating systems
- /var/PolicyDirector/keytab
- Windows operating systems
- c:\program files\tivoli\policy director\keytab
The certificate files in a directory need to be accessible to the server user (or all users). Make sure that server user (for example, ivmgr) or all users have permission to access the .kdb file and the folder containing the .kdb file. This file is created, and the value is set with one of the following utilities:
- For the ivmgrd.conf configuration file, it is set with the mgrsslcfg utility.
- For the pd.conf configuration file, it is set with the bassslcfg utility.
- For all other configuration files, it is set with the svrsslcfg utility.
The file name, including extension, is generated and set by the configuration utility. Do not edit this stanza entry.