EncrypTight User Guide 255
19 Modifying the ETKMS Properties File
This section provides information about settings in the ETKMS properties file that you can use to control
and optimize the performance of the ETKMS, including:
● About the ETKMS Properties File
● Hardware Security Module Configuration
● Digital Certificate Configuration
● Logging Setup
● Base Directory for Storing Operational State Data
● Peer ETKMS and ETPM Communications Timing
● Policy Refresh Timing
● PEP Communications Timing
About the ETKMS Properties File
For local ETKMSs, the ETKMS properties file kdist.properties is located in the
\tools\kdist\bin directory, relative to the EncrypTight installation directory.
The ETKMS properties file
kdist.properties is located in the /opt/etkms/conf directory. This
file is divided into the following sections:
● Digital certificate configuration
● Logging setup
● Base directory for operational state data
● ETKMS/ETPM communications timing parameters
● Policy refresh timing
● General Communication Timing
NOTE
For external ETKMSs, all file locations defined are relative to the /opt/etkms/bin directory.
If you have physical access to the ETKMS, you can log in directly on the ETKMS server, or you can use
an ssh client to log in remotely.