Common Database Parameters in the [arcot/db/dbconfig] Section

DbType

No default

The type of database applicable to all database connections. The supported values are:

• oracle
• mssqlserver
• db2
• mysql

Driver

No default

The fully-qualified name of the JDBC driver class that is supplied by the JDBC driver vendor. Consult your JDBC vendor documentation for the right driver name.

• For Oracle - oracle.jdbc.driver.OracleDriver
• For SQLServer - com.microsoft.sqlserver.jdbc.SQLServerDriver
• For DB2 - jcom.ibm.db2.jcc.DB2Driver
• For MySQL - com.mysql.jdbc.Driver

MinConnections

4

The minimum number of connections to initially create between AuthMinder components and the database.

MaxConnections

32

The maximum number of connections that can be created between AuthMinder components and the database.

IncConnections

2

The number of connections that are created when a new connection is needed between AuthMinder components and the database.

MaxIdleConnections

4

The maximum number of idle database connections that server can maintain.

MaxWaitTimeForConnection

30000

Maximum amount of time (in milliseconds) the Server must wait (when there are no available connections) for a connection to become available, before timing out.

AutoRevert

1

Specifies whether or not the system attempts to connect to the primary database after a failover occurs.

Set AutoRevert=1 if you have a backup database configured and if you want the server to try to connect to the primary database after a failover occurs.

MaxTries

3

The number of times the server will attempt to connect to the database before aborting the connection.

ConnRetrySleepTime

100

The number of milliseconds to delay between attempts to connect to the database.

MonitorSleepTime

50

The amount of time in seconds the Monitoring Thread sleeps between heartbeat checks on all databases.

Profiling

0

Specifies whether to log the database messages.

Set the value to 1 if you want to enable logging of database messages.

EnableBrandLicensing

0

Specifies whether a branded ODBC driver is in use.

BrandLicenseFile

IVWF.LIC

The license file name when you use a branded ODBC driver. This parameter is required if the value of EnableBrandLicensing is 1. Otherwise it is ignored.

If present, this value must not be edited.

MaxTransactionRetries

3

The maximum number of times the transaction is retried with a database instance for pre-defined error conditions.

TransactionRetrySleepTime

10

The interval in milliseconds between two consecutive transaction retries.

Primary and Backup Database Connection Parameters in [arcot/db/primarydb] and [arcot/db/backupdb] Sections

Datasource.n

The name of the ODBC System Data Source Name (DSN) pointing to the primary database hosting the server data.

AppServerConnectionPoolName.n

No default

The JNDI name used to look up the connection pool object, if the database connection pooling feature of the application server is being used.

A pool by this JNDI name should be created in the containing application server, and sufficient access right must be given to CA Web applications for it to use the connection pool:

• If the JNDI name is configured in Apache Tomcat, then use a fully qualified JNDI name. For example:
  AppServerConnectionPoolName.1=java:comp/env/SampleDS

• For other application servers, specify only the JNDI name. For example:
  AppServerConnectionPoolName.1=SampleDS

See appendix, "Configuring Application Server" for more information.

If the application server connection pool is not required, then leave this configuration empty.

URL.n

No default

The name of the JDBC data source.

• For Oracle - jdbc:oracle:thin:@<server>:<oracle_port>:<sid>
• For SQLServer - jdbc:sqlserver://<server>:<sql_port>;databaseName=<databasename>;selectMethod=cursor
• For DB2 - jdbc:db2://<server>:<db2_port>/<database>
• For MySQL -
  jdbc:mysql://<server>:<mysql_port>/<database>

Username.n

No default

The User Name used by the server to access the database.

TrustStorePath.n

No default

The SSL certificate truststore path corresponding to Datasource.n.

The path (including the filename) refers to the certificate truststore file, which contains the list of certificates that the client trusts.

Note: The password corresponding to TrustStore Path.n must to be securely stored in securestore.enc with value of TrustStorePath.n as the key by using DBUtil tool. See CA AuthMinder Administration Guide for more information on this tool.

KeyStorePath.n

HostNameInCertificate.N

No default

The value of Common Name (CN) in the subject Distinguished Name (DN) of Datasource.N SSL certificate in truststore.

Note: This parameter is required only if you are using Microsoft SQL Server.

Encryption Mode Setting Parameter in [arcot/crypto/device] Section

HSM<N>Device

s/w

The mode that sets whether the information must be encrypted with a key stored in the database or with one in a Hardware Security Module (HSM).

Supported values are:

• s/w: Indicates that the data will be encrypted with the key label stored in database.
• chrysalis: Indicates the Chrysalis (Luna) HSM will be used to encrypt the data.
• nfast: Indicates nFast (nCipher netHSM) will be used to encrypt the data.

Chrysalis (Luna) HSM Configuration Parameters in [crypto/pkcs11modules/chrysalis] Section

sharedLibrary

No Default

The absolute path to the PKCS#11 shared library corresponding to the HSM. The default value for Chrysalis (Luna) is:

C:\Program Files\LunaSA\cryptoki.dll

storageSlot

0

The HSM slot where the 3DES keys used for encrypting the data are present.

accelSlot

0

The slot for internal use by CA.

sessionCount

20

The maximum number of sessions that can be established with the HSM device.

nFast (nCipher netHSM) HSM Configuration Parameters in [crypto/pkcs11modules/nfast] Section

sharedLibrary

No Default

The absolute path to the PKCS#11 shared library corresponding to the HSM. The default value for nFast (nCipher netHSM) is:

C:\nfast\bin\cknfast.dll

storageSlot

1

The HSM slot where the 3DES keys used for encrypting the data are present.

accelSlot

0

The slot for internal use by CA.

sessionCount

200

The maximum number of sessions that can be established with the HSM device.

Instance ID Configuration Parameter in [arcot/system] Section

InstanceId

1

A parameter that can be used to identify Administration Console or User Data Service instance. It is mandatory that you provide unique values for every instance of the server.

The instance ID is also displayed in the transaction reports.

You must specify an integer value for this parameter.