Note: This feature is only available SKFS v4.15.0 onwards
Switch to (or login as) the strongkey user
shell> su - strongkey
Use the skfsadminclient update configuration or updateconfiguration web service to update all the following domain specific properties:
skfs.cfg.property.fido2.android.digitalassetlinks.enabled (true or false)
skfs.cfg.property.fido2.android.digitalassetlinks.namespace
skfs.cfg.property.fido2.android.digitalassetlinks.package
skfs.cfg.property.fido2.android.digitalassetlinks.fingerprints (Valid key hashes must be comma-separated)
Example on how to enable DAL:
shell> java -jar skfsadminclient.jar UC https://fido.example.com:8181 1 rest password fidoadminuser Abcd1234! skfs.cfg.property.fido2.android.digitalassetlinks.enabled true
shell> java -jar skfsadminclient.jar UC https://fido.example.com:8181 1 rest password fidoadminuser Abcd1234! skfs.cfg.property.fido2.android.digitalassetlinks.namespace android_app
shell> java -jar skfsadminclient.jar UC https://fido.example.com:8181 1 rest password fidoadminuser Abcd1234! skfs.cfg.property.fido2.android.digitalassetlinks.package com.strongkey
shell> java -jar skfsadminclient.jar UC https://fido.example.com:8181 1 rest password fidoadminuser Abcd1234! skfs.cfg.property.fido2.android.digitalassetlinks.fingerprints hash1,hash2,hash3
Restart the Payara using the following command:
shell> sudo systemctl restart payara
Note: If SKFS has been deployed in a clustered environment, only restart payara on all the other nodes in the cluster as replication module will copy over to configurations to all the nodes in the cluster.
Switch to (or login as) the strongkey user
shell> su - strongkey
Use the skfsadminclient delete configuration or deleteconfiguration web service to update the following domain specific properties:
skfs.cfg.property.fido2.android.digitalassetlinks.enabled
skfs.cfg.property.fido2.android.digitalassetlinks.namespace
skfs.cfg.property.fido2.android.digitalassetlinks.package
skfs.cfg.property.fido2.android.digitalassetlinks.fingerprints
Example on how to disable DAL:
shell> java -jar skfsadminclient.jar DC https://fido.example.com:8181 1 rest password fidoadminuser Abcd1234! skfs.cfg.property.fido2.android.digitalassetlinks.enabled
shell> java -jar skfsadminclient.jar DC https://fido.example.com:8181 1 rest password fidoadminuser Abcd1234! skfs.cfg.property.fido2.android.digitalassetlinks.namespace
shell> java -jar skfsadminclient.jar DC https://fido.example.com:8181 1 rest password fidoadminuser Abcd1234! skfs.cfg.property.fido2.android.digitalassetlinks.package
shell> java -jar skfsadminclient.jar DC https://fido.example.com:8181 1 rest password fidoadminuser Abcd1234! skfs.cfg.property.fido2.android.digitalassetlinks.fingerprints
Restart the Payara
shell> sudo systemctl restart payara
Note: If SKFS has been deployed in a clustered environment, only restart payara on all the other nodes in the cluster as replication module will copy over to configurations to all the nodes in the cluster.