Server Properties Reference

Individualization Server

Configuration Description Example
Transport Credential The transport credential is used to decrypt requests received from the client and sign the responses sent back. Be sure to configure the AdobeInitial.properties file appropriately with both the path to the transport credential file, as well as the encrypted PKCS12 password.
  • cert.i15n.transport.file = [PKCS12 file containing the Individualization Transport cert and key]
  • cert.i15n.transport.password = [Encrypted password for PKCS12 file]
Individualization CA Credential The Individualization server uses the Individualization CA credential to sign the machine certificates that it issues. Be sure to configure the AdobeInitial.properties file appropriately with both the path to the I15N CA credential file, as well as the encrypted PKCS12 password.
  • cert.i15n.ica.file = [PKCS12 file containing the Individualization CA cert and key]
  • cert.i15n.ica.password = [Encrypted password for PKCS12 file]
Individualization Encryption Credential The Individualization server uses the Encryption credential to encrypt sensitive files that need to be transmitted to the Individualization servers. For example, this cert supports license migration and is also used to encrypt the DRM private keys for the Individualization servers.
  • cert.i15n.decryption.file=i15n_transport.pfx
  • cert.i15n.decryption.password=password
Content Cache These settings control the location from which the Individualization server downloads content and where the content is cached on disk. The Individualization server will check the content server for new content once at startup, then at the frequency/time specified by these properties.

For the On Premises Individualization Server, we have included an initial set of content cache data. Be sure to copy the CONTENTS of the cache folder (not the cache folder itself) to the configured AdobeInitial.properties contentServer.localDirectory location.

  • contentServer.localDirectory = [Directory in which to store local content (normally tomcat/temp)]
  • contentServer.server = [Web server to contact for ECI info (unsupported in this release)]
  • contentServer.timeout = [Connection timeout, in seconds]
  • contentServer.pollFrequency = [How frequently to poll the server, in days (minimum is 1 day)]
  • contentServer.pollTime = [Time of day to poll the server, in minutes since midnight]

Please be sure to read the section CRL and ECI Files about keeping the cache up to date.

Individualization CA CRL

This Certificate Revocation List (CRL) distribution point is included within each machine certificate issued by the Individualization server. During machine certificate validation on the license server, the CRL will be downloaded from the distribution point listed in the certificate (or read from the cache if already downloaded) and checked to be sure the certificate has not been revoked. It is recommended to perform this server configuration change after going through the process of creating and deploying the Individualization CA CRL. Restart the Individualization server after any configuration change.

To set the URL for the CRL distribution point, you will need to set the AdobeInitial.properties cert.machine.crldp field.

  • cert.machine.crldp = [CRL distribution point]

For example:

cert.machine.crldp__DEV=tps://onprem-individualization.comCRL/onprem-individualization-ca.crl

The License Server should automatically download this CRL, once a license request is handled.

Note: This distribution point is not checked by Primetime DRM for validity. You must verify that this URL is valid. Errors resulting from an invalid URL will not appear until validation errors appear from the license server.

Logging Configure the AdobeInitial.properties for logging as necessary.
  • adobe.weblogs.loc = [Directory where log files will be created]
  • log.Level = [The lowest level of log messages which may appear in the logs [DEBUG | INFO] ]
  • log.FileName = [Prefix for log files. Date/time and ".log" extension will be added to the filename]
  • log.RollInterval = [Specifies how frequently the logs are rolled.]
  • log.RollSize = [Roll the logs when they reach this size (Logs will roll when either the RollInterval or RollSize is reached, whichever comes first)]
  • log.ReportLogging.Enabled =[ [true | false ] Specifies whether a separate file should be generated which contains data used by Adobe to generate Individualization reports.]
  • log.ReportLogging.FileName = [Prefix for report log files. Date/time and .log extension will be added to the filename. The l og.Level property does not apply to this log file, but log.RollInterval and log.RollSize do.]
Other
  • deviceinfo.key = [Encrypted Base64 encoded key used to HMAC device info before including it in the machine token. The key can be different for the Dev/Staging/Production environments, but must be the same for all servers in a particular environment. ]
  • keys.kgs.server = [Location of Key Gen Server (a single host/port, representing a pool of key servers) ]
  • keys.MinQueueSize = [Fetch another batch of keys from the KGS when there are this many keys left in the queue]
  • status.Timeout = [Status page will ping the KGS to determine if it can reach the server. It will time out if a response isn't received back in the specified amount of time.]

Key Generation Server

Configuration Description Example
Key Generation
  • kgs.Threads = [Number of threads to use to generate keys (should equal the number of processors available on the machine)]
  • kgs.BatchSize = [Number of keys to generate per batch]
  • kgs.KeyDirectory = [Directory in which to store key batch files]
  • kgs.MaxQueueSize = [Maximum number of key batch files to generate]
Logging
  • adobe.weblogs.loc = [Directory where log files will be created]
  • log.FileName = [Prefix for log files. Date/time and .log extension will be added to the filename]
  • log.Level = [The lowest level of log messages which may appear in the logs]
  • log.RollInterval = [Specifies how frequently the logs are rolled.]
  • log.RollSize = [Roll the logs when they reach this size (Logs will roll when either the RollInterval or RollSize is reached, whichever comes first)]

On this page