Each time SavaPage server starts it checks if the default self-signed key and certificate and password file are present. If not, they are generated (a missing password file will generate both) with defaults described in Section C.6.1, “Re-Create the Self-Signed Certificate”.

The key is used by default when the system is accessed via HTTPS on port 8632. The password of the default-ssl-keystore is generated in /opt/savapage/server/data/default-ssl-keystore.pw. Access to this file is restricted to the savapage user.

The passwords for the installed keystore created from an imported Existing SSL Certificate are set in the server.properties file. Access to this file is restricted to the savapage user.