keydatabase-password

Edit online

Syntax

keydatabase-password = <db_password>

Description

Specifies the password for the key database in the keydatabase-file.

Note: The IBM Verify Identity Access appliance uses stash files to manage the passwords for key files. As a result, key file passwords are not available to the administrator of the appliance.

If you do not know the password for the key database file, you can use the keydatabase-password-file entry to specify the name of the password stash file instead. If you configure the keydatabase-password-file entry, you can leave the keydatabase-password entry unconfigured.

The Password Synchronization Plug-in requires knowledge of the database password. Therefore, if you do not configure the keydatabase-password-file entry, you must configure the keydatabase-password entry. To complete this configuration, follow this process:
  1. Create the key file externally to the appliance. Use a known password to generate the new key file.
  2. Import the key file on to the appliance.
  3. Configure the keydatabase-password configuration entry with the known password for the Password Synchronization Plug-in.

Options

<db_password>
Specifies the password for the key database file.

Usage

If the is_enabled configuration entry in the [itim] stanza is set to true, you must set one of the following entries for the key database password:
  • keydatabase-password
  • keydatabase-password-file
Note: If there is a value configured for both of these entries, WebSEAL uses the keydatabase-password.

Default value

None.

Example

keydatabase-password = myPassword1