IBM Tivoli Federated Identity Manager, Version 6.2.1

Custom properties for the key service

kessjksservice.include.keyinfo.x509.certificate.data
Includes a base64 encoded certificate in the KeyInfo element of the signature. When this element is true, either by default or by explicit use of this property, then the other KESS runtime properties are ignored. When not specified, the default is true.
  • Value type: boolean
  • Example value: true
kessjksservice.include.keyinfo.x509.subject.key.identifier
Includes the subject key identifier in the KeyInfo element of the signature when the given certificate supports it. Can be used in addition to issuer.details and subject.name. When not specified, the default is false.
  • Value type: boolean
  • Example value: true
kessjksservice.include.keyinfo.x509.issuer.details
Adds X509 issuer details to the KeyInfo element of the signature. Can be used in addition to subject.key.identifier and subject.name. When not specified, the default is false.
  • Value type: boolean
  • Example value: true
kessjksservice.include.keyinfo.x509.subject.name
Adds the X509 subject distinguished name (DN) to the KeyInfo element of the signature. Can be used in addition to subject.key.identifier and issuer.details. When not specified, the default is false.
  • Value type: boolean
  • Example value: true
kessjksservice.exclude.inclusive.namespace.prefixes
A comma separated list of prefix names. When set the prefixes in the list will not be added to the InclusiveNamespaces list that is in the Signature Element.
  • Value type: String
  • Example value: ds


Feedback