Miscellaneous Parameters
CAPI
The following table lists the miscellaneous parameters for CAPI.
| Parameter | Default | Recommended | Description |
|---|---|---|---|
| Version | Specifies the version of the properties file. Note: Do not modify this parameter. | ||
| Credentials_Encrypted | no | yes | Determines whether the NAE Username and Password are encrypted using the PassPhraseSecure Utility. Possible settings: • yes - Enables the feature. If an invalid obfuscated string is set then the system throws an error. • no - Disables the feature. Note: It is recommended to use only obfuscated passwords. |
| KMIP_Spec_File | No default | Contains KMIP tags and related information for use by the KMIP library. This parameter should point to the kmip_tags.csv file.On Windows, the kmip_tags.csv file is placed at:\CipherTrust\CADP_for_C\kmip_tags.csvOn LINUX/UNIX the file is placed at: <CADP_for_C installation_directory>/kmip_tags.csv.On Linux/UNIX, this parameter is automatically set to the <CADP_for_C installation_directory>/kmip_tags.csv path. | |
| FPE_Unicode_File | No default | Contains the location of the FPE unicode file. This file contains FPE supported unicode characters; count should be greater than 10 and less than 255. Valid value: A path and file name - The path need to be absolute. Don’t use quotes, even if the path contains spaces. Only UTF8 characters are supported in the file. Note: All characters in the file should be separated by a newline character. Also, the characters should not be repeated in the file. | |
| Ignore_DNS_Resolution_Failure | no | no | Determines whether to ignore resolution failure if: hostname resolution fails or an invalid ip is present in NAE_IP or KMIP_IP. If this parameter is enabled, initialization does not fail and hostname is again resolved when connection is created (at runtime). Valid values • yes • no |
PKCS #11
The following table lists the miscellaneous parameters for PKCS #11.
| Parameter | Default | Recommended | Description |
|---|---|---|---|
| Version | Specifies the version of the properties file. Note: Do not modify this parameter. | ||
| Credentials_Encrypted | no | yes | Determines whether the NAE Username and Password are encrypted using the PassPhraseSecure Utility. Possible settings: • yes - Enables the feature. If an invalid obfuscated string is set then the system throws an error. • no - Disables the feature. Note: It is recommended to use only obfuscated passwords. |
| Client_Compatibility_Mode | CipherTrust | Specifies the mode in which this library runs. Possible settings: • LegacyVAE - The CADP for C PKCS#11 library will execute legacy VAE (Vormetric Application Encryption) specific functionality. • CipherTrust - The CADP for C PKCS#11 library will execute Thales CipherTrust specific functionality. | |
| Gen_Key_Id | NO | Used to create Key IDs at the time of key generation. Possible settings: • YES - Key IDs are created at the time of key generation. • NO - Key IDs are not created at the time of key generation. |
