The STSKey plugin for the AdminServer is defined in the $DLC/properties/stskeyplugin.properties file. In this file, you configure the stskeyutil settings for the AdminServer to access the OpenEdge Authentication Gateway server to retrieve the STS server key.

The following table provides information about the properties:
Property Description
stskeyExecFile The path to the stskeyutil executable. The default is $DLC/bin/stskeyutil.
keydistURL The hostname and port of the OpenEdge Authentication Gateway server.
node The cluster node name.
onlyifmodified If set to 1, the client downloads the STS server key, and updates the STS client key, only if the STS server key is newer than the existing STS client key. The default is 1.
dlcpath The path to the OpenEdge installation. The default is $DLC.
sslprotocol The SSL protocol to use. The default is TLSv1.3.
sslciphers The SSL cipher to use.
certstorepath The path to the OpenEdge certificate store. The default is $DLC/certs.
keystorepath The path to the OpenEdge keystore. The default is $DLC/keys.
nohostverify The option to suppress hostname verification during the SSL/TLS handshake. The default is 0. Do not enable in a production environment.
verbose The diagnostic logging level. Supported values are 0 through 4. The default is 0, which indicates that verbose logging is off.
serverkeypwd The encoded password for the downloaded STS server key that is used to create the STS client key. This property also supports clear text passwords.
pinginterval The frequency that the plugin checks with the Key Distribution service to see if a newer STS server key was installed. Specified in minutes. The default is 60.
servername The SNI server name. The default is blank.