---
title: LDAP Trust Manager Provider
description: The LDAP trust manager provider obtains the trusted certificates from an LDAP key store managed by the server.
component: pingds
version: 8.1
page_id: pingds:configref:objects-ldap-trust-manager-provider
canonical_url: https://docs.pingidentity.com/pingds/8.1/configref/objects-ldap-trust-manager-provider.html
section_ids:
  parent: Parent
  ldap_trust_manager_provider_properties: LDAP Trust Manager Provider properties
  basic_properties: Basic properties
  base-dn: base-dn
  enabled: enabled
  trust-store-pin: trust-store-pin
  advanced_properties: Advanced properties
  java-class: java-class
---

# LDAP Trust Manager Provider

The LDAP trust manager provider obtains the trusted certificates from an LDAP key store managed by the server.

## Parent

The LDAP Trust Manager Provider object inherits from [Trust Manager Provider](objects-trust-manager-provider.html).

## LDAP Trust Manager Provider properties

You can use configuration expressions to set property values at startup time. For details, see [Property value substitution](expressions.html).

| Basic Properties                                                            | Advanced Properties       |
| --------------------------------------------------------------------------- | ------------------------- |
| [base-dn](#base-dn) [enabled](#enabled) [trust-store-pin](#trust-store-pin) | [java-class](#java-class) |

### Basic properties

Use the `--advanced` option to access advanced properties.

### base-dn

|                         |                                                               |
| ----------------------- | ------------------------------------------------------------- |
| *Synopsis*              | The base DN beneath which LDAP key store entries are located. |
| *Default value*         | None                                                          |
| *Allowed values*        | A valid DN.                                                   |
| *Multi-valued*          | No                                                            |
| *Required*              | Yes                                                           |
| *Admin action required* | None                                                          |
| *Advanced*              | No                                                            |
| *Read-only*             | No                                                            |

### enabled

|                         |                                                                 |
| ----------------------- | --------------------------------------------------------------- |
| *Synopsis*              | Indicate whether the Trust Manager Provider is enabled for use. |
| *Default value*         | None                                                            |
| *Allowed values*        | truefalse                                                       |
| *Multi-valued*          | No                                                              |
| *Required*              | Yes                                                             |
| *Admin action required* | None                                                            |
| *Advanced*              | No                                                              |
| *Read-only*             | No                                                              |

### trust-store-pin

|                         |                                                                                                               |
| ----------------------- | ------------------------------------------------------------------------------------------------------------- |
| *Synopsis*              | Specifies the clear-text PIN needed to access the LDAP Trust Manager Provider .                               |
| *Default value*         | None                                                                                                          |
| *Allowed values*        | A string.                                                                                                     |
| *Multi-valued*          | No                                                                                                            |
| *Required*              | No                                                                                                            |
| *Admin action required* | NoneChanges to this property will take effect the next time that the LDAP Trust Manager Provider is accessed. |
| *Advanced*              | No                                                                                                            |
| *Read-only*             | No                                                                                                            |

## Advanced properties

Use the `--advanced` option to access advanced properties.

### java-class

|                         |                                                                                                          |
| ----------------------- | -------------------------------------------------------------------------------------------------------- |
| *Synopsis*              | The fully-qualified name of the Java class that provides the LDAP Trust Manager Provider implementation. |
| *Default value*         | org.opends.server.extensions.LDAPTrustManagerProvider                                                    |
| *Allowed values*        | A Java class that extends or implements:- org.opends.server.api.TrustManagerProvider                     |
| *Multi-valued*          | No                                                                                                       |
| *Required*              | Yes                                                                                                      |
| *Admin action required* | None                                                                                                     |
| *Advanced*              | Yes                                                                                                      |
| *Read-only*             | No                                                                                                       |