cmp > cmp-global-config

The cmp branch provides access to the elements you use to configure CMP.

Parameters

log-level
Specifies the Log level for CMP log entries. The default is INFO.
  • EMERGENCY
  • ALERT
  • CRITICAL
  • ERROR
  • WARNING
  • NOTICE
  • INFO
  • DEBUG
  • TRACE
renew-before-expiry
The number of days before the current certificate expiry when the system automatically initiates a renewal request (KUR – key update request) to the CMP server to acquire a new certificate. KUR messages are sent during the configured KUR window.

If you set this value to 0, the system does not issue renewal requests (KUR).

  • Default: 30 days
  • Range: 0 to 90 days
kur-start-time-of-day
The local time of day, in HHMM format, for the system start examining certificate records for KUR operations.
  • Default: 2300
  • Range: 0000 to 2400
kur-end-time-of-day
The local time of day, in HHMM format, for the system to stop examining certificate records for KUR operations.

The KUR window cannot cross midnight. The stop time must be later than the start time.

Because the SBC only checks for CMP changes every five minutes, configuring a shorter KUR window is not practical. Oracle recommends configuring the window to more than ten minutes.

  • Default: 2330
  • Range: 0000 to 2400
options
Configures CMP options to apply globally.

Path

cmp-global-config is an element of the security path. The full path from the topmost ACLI prompt is: configure terminal , and then security, and then cmp, and then cmp-global-config.

Note:

This is a single instance configuration element.