Most of the SSH Tectia Certifier configuration tasks can be done via the administration user interface of the Administration Service. However, there are some parameters that are not stored in the database or edited via Administration Service. They need to be given in configuration files to the ssh-ca-engine and ssh-ca-server commands.
The default configuration files (engine.conf and server.conf) can be found in the certifier/conf/ directory. When Engine is started up without TLS protection in insecure mode, engine-insecure.conf can be used as an configuration file.