Setting for Audit Logging

The server/WEB-INF/conf/audit.bml file specifies configuration settings for the audit logging performed by Validation Authority to keep records of user activity within the system.

Property: signEntries

Default false
Description

If true, then each audit log entry will be digitally signed to verify that is has not been modified. The digital signature is placed in the database along with the log entry. The signature is generated using Validation Authority's private “audit key.”

Warning! For a secure installation (for example, to comply with Common Criteria Evaluation Assurance Level 3), you must enable audit log entry signing.
Example <property name=“signEntries” value=“true”/>