Applications: Additional Application Settings

Application Logging Settings

The following describes how to raise the Application Log Level:

Log in to the Next Generation Hardware Appliance.
Open the Application page.
In the section Additional Application Settings the Application Log Level is set to INFO as default.
Drop down list Application Log Levels:
- INFO (default)
- DEBUG
- TRACE
- ALL
Specify the log level and confirm with Save Settings.
If you change the log level beyond INFO (default), a warning message is displayed that changing the log level may log secrets and trigger a restart of the Application.
Confirm the change with Update Log Level.

A permanent warning is displayed on all pages if the configured log level is higher than INFO, as sensitive data could be leaked.

Excessive Data Logging Enabled

It is not recommended to run the Next Generation Hardware Appliance with an elevated log level. Secrets and/or confidential data could show up in your log files.

If an External Database is configured on the Next Generation Hardware Appliance this function is not available. The CVC must be configured manually.

A message indicates: External Database in use.
The field Allow CVC CAs in EJBCA in the section Card Verifiable Certificates (CVC) is greyed out and cannot be activated.
To activate CVC manually, commands must be executed in the External Database.
A detailed description can be found in the EJBCA Admin Web.

Card Verifiable Certificates (CVC)

It is possible to create verifiable card certificates for EJBCA.

Log in to your Keyfactor Next Generation EJBCA Hardware Appliance.
Open the Applications page.
In the section Additional Application Settings section go to the subsection Card Verifiable Certificates.
Check mark Allow CVC CAs in EJBCA.
Click Save Settings to confirm.
A modal dialog opens for confirmation:
Adjusting the application settings will trigger a restart of the EJBCA application.
Confirm the change with Update application settings.