...
| Code Block |
|---|
ods-ksmutil update kasp
|
When making changes to the KASP policy the following should be considered:
- It is advised not to update policy details (in particular propagation times) while a rollover is in progress.
- Changing the algorithm used in a policy is not supported in 1.3 or 1.4.
- Certain policy changes e.g. changing 'Standby keys" from 'on' to 'off' may lead to orphaned keys.
After updating signature timers in the policy it may be helpful to issue the command:
| Code Block |
|---|
$ ods-signer clear <zone>; ods-signer sign <zone> |
as it will speed up acclimatising timers for the signatures.
Logging
Details of logs produced by the system can be found on the Logging page.