Home > Global Settings > Advanced Settings > Services Level Settings > Certification Service

Certification Service

Property Description
Enable PKCS#11 key deletion Used to control the deletion of user keys issued through certification service from PKCS#11 device. When enabled, delete request will also delete the key from PKCS#11 device. When disabled, delete request will only delete the key from database without effecting the key in PKCS#11 device
  • ENABLE_PKCS11_KEY_DELETION  = TRUE
Signature Padding Scheme
Define the signature padding scheme to be used by the certification service while doing certificate signing operation. The default parameter value is:
  • SIGNATURE_PADDING_SCHEME = PKCS1
Possible values are PKCS1 and PSS

Note: Click here for more details on limitations when PSS padding scheme is used.
SOAP version Version of SOAP message when the response XML is produced.
  • SOAP_VERSION = 1.1
Possible values are 1.1 and 1.2
Transaction logs settings Transactions can be stored either directly or delayed for better performance. The following properties are used for logging:
  • TRANSACTION_LOG_MODE = LAZY
    Used to decide whether the transactions are kept in memory before these are stored in the database (LAZY logging) or directly stored in the database (EAGER logging). Possible values: LAZY, EAGER
    In case of LAZY logging the transaction logs are kept in memory upto the number of seconds configured in TRANSACTION_LOG_LAZY_INTERVAL or number of transactions configured in TRANSACTION_LOG_LAZY_RECORD_COUNT whichever is reached first

  • TRANSACTION_LOG_LAZY_INTERVAL = 2
    When LAZY logging is configured, transactions are kept in memory upto the configured time or if the configured TRANSACTION_LOG_LAZY_RECORD_COUNT is reached before it

  • TRANSACTION_LOG_LAZY_RECORD_COUNT = 50
    When LAZY logging is configured, transactions are kept in memory until the configured number of transactions is reached or if the configured TRANSACTION_LOG_LAZY_INTERVAL is met before it. 

See also