Home
CA Functions
RA Functions
VA Functions
- OCSP Responders
Supervision Functions
- Approval Profiles
- Approve Actions
System Functions
System Configuration
RA Web

System Configuration

Basic Configurations
Administrator Preferences
Protocol Configuration
Extended Key Usages
Trusted OAuth Providers
Certificate Transparency Logs
Custom Certificate Extensions
Custom RA Styles
Statedump
External Scripts
External Account Bindings


Title The title of the site.
Header logo You can customize the header logo, using the image uploader in this section. File size should no bigger than 250KB and only jpg, jpeg and png formats are accepted.	Choose a header logo
Enable End Entity Profile Limitations Check this field if you want to use end entity access control.	Activate
Enable Key Recovery	Activate Force Local Key Generation
Certificate Chain ordering in the RA Web Enable this checkbox to deliver certificate chains root first in the RA Web	Root Certificate first
Enable Session Timeout Terminate TLS session after specified time of inactivity. This feature only works with IE6+ browsers	Use Timeout (minutes)
Monitoring and healthcheck Settings for the healthcheck servlet.	The number of seconds an item can remain in the peer publisher queue before the VA is considered out of sync.

ICAO Specific options
Enable CA Name Change	Activate

OCSP Options
Enable OCSP Responses Cleanup Enable a scheduled job to clean up old responses created by OCSP Response Presigner. The job will run at specified intervals.	Activate

Nodes in Cluster

List of known node's hostnames in this cluster. Nodes can be manually added or removed from the list.

Application Caches

Clear All Caches
Clear all the caches on all nodes. The following caches are cleared: Global Configuration Cache, CMP Configurations Cache, SCEP Configuration Cache, End Entity Profile Cache, Certificate Profile Cache, Authorization Cache, CA Cache, CryptoToken Cache, Publisher Cache, Internal KeyBinding Cache, OCSP Signer Cache, OCSP Extensions Cache, CT Caches, Certificate Store Cache and Key Exchange Certificate (MS Auto-Enrollment) Cache.

Note that after clearing the cache, if not excluded, all CryptoTokens that are manually activated will go off-line.

Exclude Active Manually-Activated CryptoTokens

Database Configuration
Maximum Query Count This number defines the maximum amount of rows that can be retrieved from the database in a single transaction.
Maximum Query Timeout This number defines the timeout in milliseconds for certain database queries. 0 means disabled. Requires JDBC and database support to work.

Redact Subject Name from logs
Redact Subject Name when End Entity Profile data is unavailable These scenarios include and are not exhaustive to operations in remote peers, EMPTY end entity profile, certain exception stack traces, etc.	Enable
Always redact Subject Name irrespective for End Entity Profile settings	Enable

Command Line Interface
Enable Command Line Interface Access Enable Super Administrator access from the local command line interface (CLI). Warning: Disabling this makes it impossible to use the CLI for any operation that requires administrator rights including renewing the Super Administrator certificate. Please, make sure to renew the administrator certificates using the Admin Web before they expire!	Activate
Enable Command Line Interface Default User Enable the default CLI user defined in ejbca.properties. Disabling this user will cause the Command Line Interface to require authentication for all CLI operations.	Activate

© 2002–2025. EJBCA® is a registered trademark.