CSSCurrent en:System Startup Configuration

About System Startup Settings

Some settings have to be applied before starting the Cryptshare Server as they cannot be modified during runtime.

Temporary Folder

The temporary folder is a system folder used by the Cryptshare Application for internal purposes. During an upload process the uploaded data will be stored to this directory. As some systems use several system partitions or hard disks it might be necessary to change this directory in case of insufficient disk space. This setting is an internal Java Virtual Machine setting and therefore has to be set before the Cryptshare system starts up. Please perform the following steps to change the default temporary folder:

• Open the file 'launcher.ini' located in the Cryptshare Installation Directory
• Add a new line with the following syntax

vm.arg.<count>=-Djava.io.tmpdir=<path>

• Save and close the file
• Restart the Cryptshare Service

Note: '<count>' is a counter beginning with '1'.

Windows

vm.arg.1=-Djava.io.tmpdir="C:/Program Files/Befine Solutions AG/Cryptshare-3/tmp"

Important

* Be aware NOT to use backslashes, but forward slashes instead.

• The complete path must be enclosed within double quotes and NOT single quotes.

Linux

vm.arg.1=-Djava.io.tmpdir=/var/opt/cryptshare-3/tmp

Do not forget to change the notification value for the TMP-Folder here: System Notifications

Please note the article Security Audit.

---

Custom Webserver Ports

The web server ports can be specified via parameters in the 'launcher.ini' file. Proceed as follows:

• Open the launcher.ini file, which is located in the Cryptshare installation directory.
• Add a new line for each port that you want to change, using the following format:

vm.arg.<count>=-D<parameter>=<value>

• The following parameters are available:
  • cryptshare.ui.http.port: The HTTP port of the user interface
  • cryptshare.ui.https.port: The HTTPS port of the user interface
  • cryptshare.ai.http.port: The HTTP port of the administration interface
  • cryptshare.ai.https.port: The HTTPS port of the administration interface
• Restart the Cryptshare service.

<count> : Counter, beginning with '1'

<parameter>: Name of the parameter as described above

<value>: Port number

Example for a launcher.ini with custom ports:

main.jar=server-3.12.1.0.jar
# Additional VM args for the inner process
# vm.arg.1
# vm.arg.2
vm.arg.1=-Dcryptshare.ui.http.port=8088
vm.arg.2=-Dcryptshare.ui.https.port=8089
vm.arg.3=-Dcryptshare.ai.http.port=8090
vm.arg.4=-Dcryptshare.ai.https.port=8091

---

Cryptshare behind a Proxy Server

If your Cryptshare Server is running behind a proxy server and therefore cannot retrieve new updates, you have to set the proxy settings for the Java Runtime Environment Cryptshare is running within. Please perform the following steps to set the proxy server for Cryptshare:

• Open the file 'launcher.ini' located in the Cryptshare Installation Directory
• Add a new line for each proxy property that you want to add

vm.arg.<count>=-D<proxy.property.name>=<proxy.property.value>

• • You can use the following proxy properties:
    • Proxy Host: 'http.proxyHost'
    • Proxy Port: 'http.proxyPort'
    • Proxy User: 'http.proxyUser'
    • Proxy Password: 'http.proxyPassword'

Note: '<count>' is a counter beginning with '1'.

• Save and close the file
• Restart the Cryptshare Service
  Https Tunneling

  In some environments, connection errors may occur when using a proxy server with HTTPS due to missing authentication. In this case further VM arguments have to be set in the 'launcher.ini' (see also https://www.oracle.com/technetwork/java/javase/8u111-relnotes-3124969.html):
• -Dhttp.auth.preference=basic
• -Djdk.http.auth.tunneling.disabledSchemes= (blank)

Example launcher.ini

main.jar=server-3.12.1.0.jar
# Additional VM args for the inner process
# vm.arg.1
# vm.arg.2
vm.arg.1=-Dhttp.proxyHost=proxy.yourdomain.de
vm.arg.2=-Dhttp.proxyPort=8888

Server Name Indication (SNI)

SNI can be enabled by setting the system property cryptshare.ui.sniHostCheck to true, using the following format:

vm.arg.<count>=-Dcryptshare.ui.sniHostCheck=true