Enable TLS key logging

Only enable TLS key logging when advised by Support. After troubleshooting, disable key logging and remove the SSL key log file.

A flag to enable TLS key logging to troubleshoot TLS issues between the agent and AM.

true: Enable TLS key logging. If you enable TLS key logging, you must specify the name of the SSL key log file in the AM_SSL_KEYLOG_FILE environment variable.
false: Disable TLS key logging.

Learn more in TLS key logging in the User Guide.

Default: false

Property name

org.forgerock.agents.config.tls.keylog.enable
Introduced in Web Agent 4.x

Function

Debug

Type

Boolean: true returns true; all other strings return false.

Bootstrap property

Required property

Restart required