NOTE: Learn more about the Policy Module here.

To update a policy, retrieve the current policy using the instructions here. Follow the schema and update policies using the Update Policy command in the SKFS Admin Client.

The command for Update Policy is listed below. For more details click here.

java -jar skfsadminclient.jar UP <hostport> <did> <wsprotocol> <authtype> [ <accesskey> <secretkey> | <svcusername> <svcpassword> ] <sid> <pid> <notes> <policy>

Example for changing the "requireCounter" from "mandatory" to "optional" according to the schema:

 NOTE: The policy JSON is minified to easily pass in as argument in terminal.

java -jar skfsadminclient.jar UP https://example.strongkey.com:8181 1 REST PASSWORD fidoadminuser Abcd1234! 1 1 "Updated Policy" '{"FidoPolicy":{"name":"MinimalPolicy","copyright":"","version":"1.0","startDate":"1745341841","endDate":"1760103870871","system":{"did":1,"requireCounter":"optional","integritySignatures":false,"userVerification":["required","preferred","discouraged"],"userPresenceTimeout":0,"allowedAaguids":["all"],"transport":["usb","internal"]},"subdomains":{"enabled":false,"allowedSubdomains":[]},"relatedOriginRequests":{"enabled":false},"digitalAssetLinks":{"enabled":false},"algorithms":{"curves":["secp256r1","secp384r1","secp521r1","curve25519"],"rsa":["RS256","RS384","RS512","PS256","PS384","PS384"],"signatures":["ES256","ES384","ES512","EdDSA","ES256K"]},"attestation":{"conveyance":["none","indirect","direct","enterprise"],"formats":["fido-u2f","packed","tpm","android-key","android-safetynet","apple","none"]},"registration":{"displayName":"required","attachment":["platform","cross-platform"],"discoverableCredential":["required","preferred","discouraged"],"excludeCredentials":"enabled"},"authentication":{"allowCredentials":"enabled"},"authorization":{"maxdataLength":256,"preserve":true},"rp":{"id":"strongkey.com","name":"FIDOServer"},"extensions":{},"mds":{"authenticatorStatusReport":[{"status":"FIDO_CERTIFIED_L1","priority":"1","decision":"IGNORE"},{"status":"FIDO_CERTIFIED_L2","priority":"1","decision":"ACCEPT"},{"status":"UPDATE_AVAILABLE","priority":"5","decision":"IGNORE"},{"status":"REVOKED","priority":"10","decision":"DENY"}]},"jwt":{"algorithms":["ES256","ES384","ES521"],"duration":30,"required":["rpid","iat","exp","cip","uname","agent"]},"signcerts":{"rootca":{"subjectdn":"CN=StrongKey FIDO Server RootCA,OU=DID 1,O=StrongKey","serialnumber":"-6495480345599703496","pemcert":"-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----","jwtcerts":{"default":[{"subjectdn":"CN=SKFS JWT Signer 1,OU=DID 1,O=StrongKey","serialnumber":"-1287674478157343383","pemcert":"-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"},{"subjectdn":"CN=SKFS JWT Signer 2,OU=DID 1,O=StrongKey","serialnumber":"-2588676161065994090","pemcert":"-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"},{"subjectdn":"CN=SKFS JWT Signer 3,OU=DID 1,O=StrongKey","serialnumber":"-6032521155092793271","pemcert":"-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"}]},"samlcerts":{"default":[{"subjectdn":"CN=SKFS SAML Signer 1,OU=DID 1,O=StrongKey","serialnumber":"-6101399629338915074","pemcert":"-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"},{"subjectdn":"CN=SKFS SAML Signer 2,OU=DID 1,O=StrongKey","serialnumber":"7043537645746616104","pemcert":"-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"},{"subjectdn":"CN=SKFS SAML Signer 3,OU=DID 1,O=StrongKey","serialnumber":"6488007404943828176","pemcert":"-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"}],"citrixidp":{"subjectdn":"CN=SKFS SAML Signer 1,OU=DID 1,O=StrongKey","serialnumber":"-6101399629338915074","pemcert":"-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"}}}}}}'

Copyright (c) 2001-2025 StrongAuth, Inc. All rights reserved.

REST Update Policy with password
******************************************

Calling update @ https://example.strongkey.com:8181/skfs/rest/updatepolicy
Response : {"Response":"Successfully updated policy 1-1","responseCode":"FIDO-MSG-0067","skfsVersion":"4.16.0","skfsFQDN":"example.strongkey.com","TXID":"1-1-77-1745607199309"}

Update Policy complete.
******************************************

Done with Update Policy!