Users Guide
560 | Administration Dell Networking W-ClearPass Policy Manager 6.6 | User Guide
X.509 is an important standard for a public key infrastructure to manage digital certificates and public-key
encryption. X.509 is a key part of the Transport Layer Security protocol used to secure web and email
communication.
l All HTTPS communication to external services using X.509 v3 certificates must pass the basic constraint
checks.
Database Parameters
The following figure displays the Cluster-Wide Parameters > Database dialog:
Figure 548: Cluster-Wide Parameters > Database Dialog
1. Configure the Cluster-Wide Parameters > Database parameters as described in the following table:
Parameter Action/Description
Auto backup configuration
options
Select any of the following auto-backup configuration options:
l Off: Select this to not to perform periodic backups.
l Select Off before upgrading W-ClearPass Policy Manager to avoid the
interference between Auto backup and migration process.
l Config: Perform a periodic backup of the configuration database only. This is the
default auto backup configuration option.
l Config|SessionInfo: Perform a backup of the configuration database and the
session log database.
NOTE: It is recommended that you set this option to Off or Config before starting an
upgrade. This ensures the Auto Backup process does not interfere with migration
post upgrade. If required, you can change this setting back to Config|SessionInfo 24
hours after upgrade completion.
Database user
"appexternal" password
Enter the password for the appexternal username for this connection to the
database.
Replication Batch Interval Configure the time interval (in seconds) at which the subscribers synchronize with
the Publisher.
The default value is 5 seconds. The allowed range is 1 to 60 seconds.
Store Password Hash for
MSCHAP authentication
To store passwords for admin and local users to Hash and NTLM hash formats
(which enables RADIUSMSCHAP authentications against admin or local
repositories), set this to TRUE.
If you set this to FALSE, RADIUS MSCHAP authentications are not possible because
Table 304: Cluster-Wide Parameters > Database Parameters