Installation Guides › Policy Server Installation Guide › Unattended Installation › How to Run an Unattended Policy Server Install › Modify the Policy Server Installer Properties Files › SM Key Database

SM Key Database

If you set the DEFAULT_SMKEYDB_CHOICE parameter to true, then set the following:

DEFAULT_CREATE_SMKEYDB

Specifies if the Policy Server installer is to create an smkeydatabase or change the password of an existing smkeydatabase.

true

The installer creates an smkeydatabase.

false

The installer changes the password of an existing smkeydatabase.

DEFAULT_SMKEYDB_PW

If you set the DEFAULT_CREATE_SMKEYDB parameter to true, this parameter lets you enter a clear text password for the new smkeydatabase.

Default: This parameter is commented out after the initial Policy Server installation.

If you comment ENCRYPTED_SMKEYDB_PW and uncomment DEFAULT_SMKEYDB_PW, then the installer uses the cleartext password from DEFAULT_SMKEYDB_PW.

ENCRYPTED_SMKEYDB_PW

Represents the encrypted smkeydatabase password entered the last time the Policy Server installer configured an smkeydatabase. If you set the DEFAULT_CREATE_SMKEYDB parameter to true, you can use the existing encrypted value to set the password for the new smkeydatabase. This password cannot be changed.

Default: This parameter is uncommented. The installer uses this value, unless you comment out this parameter and uncomment DEFAULT_SMKEYDB_PW.

Important! Do not modify this password because the value is encrypted.

DEFAULT_OLD_SMKEYDB_PW

If you set the DEFAULT_CREATE_SMKEYDB parameter to false, this parameter lets you enter the existing smkeydatabase password in clear text.

Default: This parameter is commented out after the initial Policy Server installation.

If you comment ENCRYPTED_OLD_SMKEYDB_PW and uncomment DEFAULT_OLD_SMKEYDB_PW, then the installer uses the cleartext password from DEFAULT_OLD_SMKEYDB_PW.

ENCRYPTED_OLD_SMKEYDB_PW

Represents the encrypted smkeydatabase password entered the last time the Policy Server installer configured an smkeydatabase. If you set the DEFAULT_CREATE_SMKEYDB parameter to false, you can use the existing encrypted value to change the smkeydatabase password. This password cannot be changed.

Default: This parameter is not commented. The installer uses this value, unless you comment out this parameter and uncomment DEFAULT_OLD_SMKEYDB_PW.

Important! Do not modify this password because the value is encrypted.

DEFAULT_NEW_SMKEYDB_PW

If you set the DEFAULT_CREATE_SMKEYDB parameter to false, this parameter lets you enter the new smkeydatabase password in clear text.

Default: This parameter is commented out after the initial Policy Server installation.

If you comment ENCRYPTED_NEW_SMKEYDB_PW and uncomment DEFAULT_NEW_SMKEYDB_PW, then the installer uses the cleartext password from DEFAULT_NEW_SMKEYDB_PW.

ENCRYPTED_NEW_SMKEYDB_PW

Represents the encrypted smkeydatabase password entered the last time the Policy Server installer changed an smkeydatabase password. If you set the DEFAULT_CREATE_SMKEYDB parameter to false, you can use the existing encrypted parameter to change an smkeydatabase password. Only use the encrypted value to change the password if you know the existing value. This password cannot be changed.

Default: This parameter is not commented. The installer uses this value, unless you comment out this parameter and uncomment DEFAULT_NEW_SMKEYDB_PW.

Important! Do not modify this password because the value is encrypted.

DEFAULT_SMKEYBD_IMPORT_CHOICE

If you set the DEFAULT_CREATE_SMKEYDB parameter to true, this parameter lets you specify if the installer is to import the certificate authority (CA) default certificates into the smkeydatabase.

true

The installer imports the CA default certificates.

false

The installer does not import the CA default certificates. These certificates must be manually imported into the smkeydatabase after the installer creates the smkeydatabase.