Product Documentation

Enabling Android Digital Asset Links (DAL) for a specific domain

Note: This feature is only available SKFS v4.15.0 onwards

  • Switch to (or login as) the strongkey user

    shell> su - strongkey
  • Use the skfsadminclient update configuration or updateconfiguration web service to update all the following domain specific properties:

    skfs.cfg.property.fido2.android.digitalassetlinks.enabled (true or false)
    skfs.cfg.property.fido2.android.digitalassetlinks.namespace 
    skfs.cfg.property.fido2.android.digitalassetlinks.package
    skfs.cfg.property.fido2.android.digitalassetlinks.fingerprints (Valid key hashes must be comma-separated) 
    
    Example on how to enable DAL:
    shell> java -jar skfsadminclient.jar UC https://fido.example.com:8181 1 rest password fidoadminuser Abcd1234! skfs.cfg.property.fido2.android.digitalassetlinks.enabled true
    
    shell> java -jar skfsadminclient.jar UC https://fido.example.com:8181 1 rest password fidoadminuser Abcd1234! skfs.cfg.property.fido2.android.digitalassetlinks.namespace android_app
    
    shell> java -jar skfsadminclient.jar UC https://fido.example.com:8181 1 rest password fidoadminuser Abcd1234! skfs.cfg.property.fido2.android.digitalassetlinks.package com.strongkey
    
    shell> java -jar skfsadminclient.jar UC https://fido.example.com:8181 1 rest password fidoadminuser Abcd1234! skfs.cfg.property.fido2.android.digitalassetlinks.fingerprints hash1,hash2,hash3
    
  • Restart the Payara using the following command:

    shell> sudo systemctl restart payara

    Note: If SKFS has been deployed in a clustered environment, only restart payara on all the other nodes in the cluster as replication module will copy over to configurations to all the nodes in the cluster.

     

Disabling DAL for specific domain

  • Switch to (or login as) the strongkey user

    shell> su - strongkey
  • Use the skfsadminclient delete configuration or deleteconfiguration web service to update the following domain specific properties:

    skfs.cfg.property.fido2.android.digitalassetlinks.enabled
    skfs.cfg.property.fido2.android.digitalassetlinks.namespace
    skfs.cfg.property.fido2.android.digitalassetlinks.package
    skfs.cfg.property.fido2.android.digitalassetlinks.fingerprints
    
    Example on how to disable DAL:
    shell> java -jar skfsadminclient.jar DC https://fido.example.com:8181 1 rest password fidoadminuser Abcd1234! skfs.cfg.property.fido2.android.digitalassetlinks.enabled
    
    shell> java -jar skfsadminclient.jar DC https://fido.example.com:8181 1 rest password fidoadminuser Abcd1234! skfs.cfg.property.fido2.android.digitalassetlinks.namespace
    
    shell> java -jar skfsadminclient.jar DC https://fido.example.com:8181 1 rest password fidoadminuser Abcd1234! skfs.cfg.property.fido2.android.digitalassetlinks.package
    
    shell> java -jar skfsadminclient.jar DC https://fido.example.com:8181 1 rest password fidoadminuser Abcd1234! skfs.cfg.property.fido2.android.digitalassetlinks.fingerprints
    
  • Restart the Payara

    shell> sudo systemctl restart payara

    Note: If SKFS has been deployed in a clustered environment, only restart payara on all the other nodes in the cluster as replication module will copy over to configurations to all the nodes in the cluster.