<?xml version="1.0" encoding="UTF-8" ?>
<server description="myMember">

    <featureManager>
        <feature>collectiveMember-1.0</feature>
    </featureManager>

    <!-- Define the host name for use by the collective.
         If the host name needs to be changed, the server should be
         removed from the collective and re-joined or re-replicated. -->
    <variable name="defaultHostName" value="host.name" />

    <!-- Connection to the collective controller -->
    <collectiveMember controllerHost="1.2.3.4"
                      controllerPort="9443" />

    <!-- clientAuthenticationSupported set to enable bidirectional trust -->
    <ssl id="defaultSSLConfig"
         keyStoreRef="defaultKeyStore" serverKeyAlias="MEMBER"
         trustStoreRef="defaultTrustStore"
         clientAuthenticationSupported="true" />

    <!-- inbound (HTTPS) keystore. Where the location attribute is the  safCommonKeyring value  -->
    <keyStore id="defaultKeyStore" location="safkeyring:///MEMBER.KEYRING"
              password="password" fileBased="false" readOnly="true" type="JCERACFKS" provider="IBMJCE" />

    <!-- inbound (HTTPS) truststore -->
    <keyStore id="defaultTrustStore" location="safkeyring:///MEMBER.KEYRING"
              password="password" fileBased="false" readOnly="true" type="JCERACFKS" provider="IBMJCE" />

    <!-- server identity keystore -->
    <keyStore id="serverIdentity" location="safkeyring:///MEMBER.SERVID.KEYRING"
              password="password" fileBased="false" readOnly="true" type="JCERACFKS" provider="IBMJCE" />

    <!-- collective trust keystore -->
    <keyStore id="collectiveTrust" location="safkeyring:///MEMBER.KEYRING"
              password="password" fileBased="false" readOnly="true" type="JCERACFKS" provider="IBMJCE" />

  <hostAuthInfo useHostCredentials="true" />
  <collectiveCertificate rdn="OU=Collective"></collectiveCertificate>

</server>

<server description="myMember">

    <!-- Enable features -->
    <featureManager>
        <feature>jsp-2.3</feature>
    </featureManager>

    <!-- To access this server from a remote client add a host attribute to the following element, e.g. host="*" -->
    <httpEndpoint id="defaultHttpEndpoint"
                  host="*"
                  httpPort="8080"
                  httpsPort="8443" />

    <!-- Automatically expand WAR files and EAR files -->
    <applicationManager autoExpand="true"/>

   <include location="${server.config.dir}/member-join-include.xml" />

</server>