The can be used to obtain the server certificate from a key store file on the local file system. Multiple file formats may be supported, depending on the providers supported by the underlying Java runtime environment. ds-cfg-file-based-key-manager-provider ds-cfg-key-manager-provider org.opends.server.extensions.FileBasedKeyManagerProvider Should use a file-based property definition? Specifies the path to the file that contains the private key information. This may be an absolute path, or a path that is relative to the instance root. Changes to this property will take effect the next time that the key manager is accessed. .* FILE A path to an existing file that is readable by the server. ds-cfg-key-store-file Can we restrict this to an enumeration? How can the client guess which values are possible? What is the default value? Specifies the format for the data in the key store file. Valid values should always include 'JKS' and 'PKCS12', but different implementations may allow other values as well. If no value is provided, the JVM-default value is used. Changes to this configuration attribute will take effect the next time that the key manager is accessed. .* STRING Any key store format supported by the Java runtime environment. ds-cfg-key-store-type