Comment: New article
| Info |
|---|
This article is new for Identity Manager 5.0.01. |
Bootstrapping of the sign and encrypt engine must be done before the system is used for the first time. Bootstrapping of production systems involve use of various certificate authorities to generate keys and issue certificates used by Identity Manager.
Most descriptors, such as EncryptedFields and ObjectHistorySigner, always require proper bootstrapping for secure operation. Depending on the subset of Identity Manager features to be used, certain descriptors may be configured with placeholder keys and certificates, for example, SignEmailDescriptor, if E-Mail email signing in Identity Manager is not enabled.
...