{"features":[{"Description":"OX Guard supports the Autocrypt specification.\n","Name":"Autocrypt"},{"Description":null,"Name":"Basic OX Guard configuration"},{"Description":"A storage is required for storing encrypted emails to guest\/non-OX users. \nThis can be an attached local filesystem, or Amazon S3 compatible object store depending on \nwhich open-xchange-guard-*-storage package is installed (file or S3). \n","Name":"File storage"},{"Description":"OX Guard is able to query external HKP server for PGP keys.\n","Name":"HKP Client"},{"Description":"OX Guard is able to act as HKP server for serving PGP keys.\n","Name":"HKP Server"},{"Description":"OX Guard mail filter extensions for sieve\n","Name":"Mail Filter"},{"Description":null,"Name":"OX Guard backend plugin"},{"Description":"A storage is required for storing encrypted emails to guest\/non-OX users. \nThis can be an attached local filesystem, or Amazon S3 compatible object store depending on \nwhich open-xchange-guard-*-storage package is installed (file or S3). \n","Name":"S3 storage"},{"Description":"OX Guard provides a support API which allows various administrative tasks.\n","Name":"Support API"},{"Description":"OX Guard is able to query external WKS servers for PGP keys.\n","Name":"WKS Client"}],"version":{"Year":2021,"Version":"null"},"properties":[{"Description":"Defines if Autocrypt is enabled. If enabled, Guard will add autocrypt headers to outgoing emails and allow users to import keys from incoming autocrypt headers.\n","ConfigCascadeAware":true,"Version":"2.10.2","Package":"open-xchange-guard","Default":"true","File":"guard-core.properties","Feature":"Autocrypt","Key":"com.openexchange.guard.autoCryptEnabled","Reloadable":true,"Tags":["Autocrypt"]},{"Description":"Defines if the outgoing prefer-encrypt<\/i> value of the Autocrypt header will be set to mutual<\/i>.\n","ConfigCascadeAware":true,"Version":"2.10.2","Package":"open-xchange-guard","Default":"true","File":"guard-core.properties","Feature":"Autocrypt","Key":"com.openexchange.guard.autoCryptMutual","Reloadable":true,"Tags":["Autocrypt"]},{"Description":"The trust level for keys fetched from Autocrypt headers.\n","ConfigCascadeAware":false,"Version":"2.10.2","Package":"open-xchange-guard","Default":"2","File":"guard-core.properties","Feature":"Autocrypt","Key":"com.openexchange.guard.keySources.trustLevelAutoCrypt","Reloadable":false,"Tags":["Autocrypt","Keymanagement","Key trust"]},{"Description":"The trust level for keys fetched from Autocrypt headers and manually verified by the user.\n","ConfigCascadeAware":false,"Version":"2.10.2","Package":"open-xchange-guard","Default":"5","File":"guard-core.properties","Feature":"Autocrypt","Key":"com.openexchange.guard.keySources.trustLevelAutoCryptUserVerified","Reloadable":false,"Tags":["Autocrypt","Keymanagement","Key trust"]},{"Description":"The endpoint specifying the OX Guard server to connect to.

The endpoint is specified as URL with a schema of http:\/\/, or https:\/\/, \nthe IP adress or hostname of the guard server (or loadballancer), and the port.

For example: https:\/\/localhost:8009\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":null,"File":"guard-api.properties","Feature":"OX Guard backend plugin","Key":"com.openexchange.guard.endpoint","Reloadable":false,"Tags":["Backend Plugin"]},{"Description":"This value defines the socket read timeout in milliseconds when connected to an OX Guard endpoint.\n","ConfigCascadeAware":false,"Version":"2.10.0","Package":"open-xchange-guard","Default":"15000","File":"guard-api.properties","Feature":"OX Guard backend plugin","Key":"com.openexchange.guard.endpointTimeout","Reloadable":false,"Tags":["Backend Plugin"]},{"Description":"OX Guard performs a SRV lookup on a recipient's domain in order to query the related key server.\nThis option controls whether or not OX Guard trusts unsigned SRV DNS records.\nIf set to \"false\", OX Guard will discard unsigned DNS SRV records. \nOther DNS requests than SRV are not affected.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"true","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.dns.allowUnsignedSRVRecords","Reloadable":false,"Tags":["HKP Client","WKS Client","DNS"]},{"Description":"Defines the API user agent.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"Open-Xchange Guard Server","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.apiUserAgent","Reloadable":false,"Tags":["REST API"]},{"Description":"Specify key length for symmetric AES encryption.

Note:\nAES Key length of 256 is preferred, but not supported on all systems. \nMay need to have the Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction \nPolicy Files installed. \n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"256","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.aesKeyLength","Reloadable":false,"Tags":["Keymanagement"]},{"Description":"Option to attach help files to outgoing PGP emails. The help files will not\nbe displayed in PGP enabled email clients, rather they will only be displayed\nfor clients that don't have PGP, and will explain to them that this is a PGP email\nand that they should log onto the UI to read the email\n","ConfigCascadeAware":false,"Version":"2.8.0","Package":"open-xchange-guard","Default":"true","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.attachHelpFile","Reloadable":false,"Tags":["E-Mail"]},{"Description":"Maximum lifetime of an OX Guard user session.

Deletion of expired authentication tokens is scheduled once a day (see com.openexchange.guard.cronHour<\/a>).

Can contain units of measurement: D(=days) W(=weeks) H(=hours) M(=minutes).\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.cronHour<\/a>"],"Version":"2.4.0","Package":"open-xchange-guard","Default":"1W","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.authLifeTime","Reloadable":false,"Tags":["Session handling"]},{"Description":"Per default the connection between the Guard backend and the configured Open-Xchange\nREST API host is unencrypted. You can optionally encrypt the whole communication between\nthose two components by using SSL. Please note: Enabling SSL might decrease performance\nand\/or create more system load due to additional encoding of the HTTP streams.\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.cronHour<\/a>"],"Version":"2.4.0","Package":"open-xchange-guard","Default":"false","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.backendSSL","Reloadable":false,"Tags":["Network","Security"]},{"Description":"Defines how long (minutes) someone will be locked out after entering a wrong password several times attempts.\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.badPasswordCount<\/a>"],"Version":"2.4.0","Package":"open-xchange-guard","Default":"10","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.badMinuteLock","Reloadable":false,"Tags":["Session handling","Security"]},{"Description":"Defines how many times a person can attempt to unlock an encrypted item before being locked out.\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.badMinuteLock<\/a>"],"Version":"2.4.0","Package":"open-xchange-guard","Default":"5","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.badPasswordCount","Reloadable":false,"Tags":["Session handling","Security"]},{"Description":"The timeout for all HTTP(S) connections in ms\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"10000","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.connectionTimeout","Reloadable":false,"Tags":["Network"]},{"Description":"At what hour of the day should the Guard service execute the\ninternal maintenance cron jobs? Possible values are: 0 - 23\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"2","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.cronHour","Reloadable":false,"Tags":["Tasks"]},{"Description":"The password for the databases\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":null,"File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.databasePassword","Reloadable":false,"Tags":["Database","Credentials"]},{"Description":"The username to access the OX Backend and Guard database.\nThis user needs to have select, create, lock, insert, update privileges.\nGuard database user also should have alter (for updates), drop, index. \n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":null,"File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.databaseUsername","Reloadable":false,"Tags":["Database","Credentials"]},{"Description":"Specifies the base name for the Guard databases. On initialisation\nGuard will create a database with the baseName, then additional\nGuest shards with the name baseName_#.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"oxguard","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.dbSchemaBaseName","Reloadable":false,"Tags":["Database"]},{"Description":"The default language to use.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"en_US","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.defaultLanguage","Reloadable":false,"Tags":["i18n"]},{"Description":"Specify whether or not users should be treated as default users by default.\n","ConfigCascadeAware":true,"Version":"2.4.0","Package":"open-xchange-guard","Default":"false","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.defaultAdvanced","Reloadable":false,"Tags":["User Settings"]},{"Description":"This is for development- and testing-environments only.

\nWARNING:

If this property is set to \"true\", various Guard functions can be accessed without authentication needed!

Make sure this is set to \"false\" for a productive setup.\n<\/b>\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"false","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.demo","Reloadable":false,"Tags":["Testing"]},{"Description":"Guard's Support-API allows to expose deleted, but backed-up keys for download.\nThis property specifies the amount of hours how long a deleted key will be\nmarked as \"exposed\" (downloadable), or 0 for disabling automatic reset of exposed keys.

Note: Resetting is scheduled once a day (see com.openexchange.guard.cronHour<\/a>).\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.cronHour<\/a>"],"Version":"2.4.0","Package":"open-xchange-guard","Default":"168","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.exposedKeyDurationInHours","Reloadable":false,"Tags":["Keymanagement"]},{"Description":"When Guard sends an encrypted eMail to members, they may not be using the webmail UI\nto read the email. If com.openexchange.guard.attachHelpFile<\/a> is set to true,\na help file is attached, and a link will be provided to log into\ntheir webmail to read the encrypted item. This setting is used to point to a generic\nlog in for the webmail system. Sent to multiple recipients, so not customised to\nthe individual recipient. OK domain:port. HTTPS will always be added\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"example.com","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.externalEmailURL","Reloadable":false,"Tags":["E-Mail"]},{"Description":"When Guard sends an eMail to external recipients those recipients will be able to\naccess the encrypted content by opening a link in that eMail. The description and\nthe link of that eMail are not encrypted and always readable by the recipient. The\nlink points to the Guard reader for external recipients, a servlet to decrypt and\ndisplay the encrypted eMail content. Specify which domain and path should be used\nThe Https link will be created dynamically by Guard.\nThis value will be used as the default unless over-written by cascade value\n'com.openexchange.guard.externalReaderURL'.

This property is deprecated in 2.10.0 and may be removed in further releases.<\/b>\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"example.com\/guard\/reader\/reader.html","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.externalReaderPath","Reloadable":false,"Tags":["E-Mail"]},{"Description":"If the PGP message does not have MDC tags attached, either 1) message is rejected\nor 2) a warning message is displayed to the user and the email is converted to\nplaintext. False displays the message. Setting to true\nwill result in emails being rejected if the MDC data doesn't exist.\n","ConfigCascadeAware":false,"Version":"2.10.0","Package":"open-xchange-guard","Default":"false","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.failForMissingMDC","Reloadable":false,"Tags":["E-Mail","Security"]},{"Description":"The directory used for buffering uploaded data.\nIf empty: falls back to use \"java.io.tmpdir\"

NOTE: Guard does only buffer non sensitive or encrypted data to disk.<\/b>\n","ConfigCascadeAware":false,"Version":"2.8.0","Package":"open-xchange-guard","Default":"10240","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.fileUploadDirectory","Reloadable":false,"Tags":["Network"]},{"Description":"The threshold in bytes at which uploaded data will be buffered to disk.

NOTE: Guard does only buffer non sensitive or encrypted data to disk.<\/b>\n","ConfigCascadeAware":false,"Version":"2.8.0","Package":"open-xchange-guard","Default":"10240","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.fileUploadBufferThreshhold","Reloadable":false,"Tags":["Network"]},{"Description":"","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":null,"File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.fromEmail","Reloadable":false,"Tags":["E-Mail"]},{"Description":"Enables local caching for Guest users\/data.\n","ConfigCascadeAware":false,"Version":"2.10.0","Package":"open-xchange-guard","Default":"true","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.guestCaching","Reloadable":false,"Tags":["Database","Guests"]},{"Description":"Guest email accounts that aren't used after this number of days are cleaned.
The mail items are removed, and guest scheduled for removal.\n","ConfigCascadeAware":false,"Version":"2.10.0","Package":"open-xchange-guard","Default":"365","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.guestCleanedAfterDaysOfInactivity","Reloadable":false,"Tags":["Guests"]},{"Description":"Specifies the SMTP server's password which is used for sending guest-emails.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":null,"File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.guestSMTPPassword","Reloadable":false,"Tags":["Guests","E-Mail","Credentials"]},{"Description":"Specifies the SMTP server's port which is used for sending guest-emails.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"25","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.guestSMTPPort","Reloadable":false,"Tags":["Guests","E-Mail"]},{"Description":"Specifies the SMTP server information for replies of external recipients. Those recipients\nare able to decrypt, display and reply to eMails they receive via the guest interface.\nThe SMTP server is also used for sending password reset e-mails\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":null,"File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.guestSMTPServer","Reloadable":false,"Tags":["Guests","E-Mail"]},{"Description":"Specifies the SMTP username.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":null,"File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.guestSMTPUsername","Reloadable":false,"Tags":["Guests","E-Mail","Credentials"]},{"Description":"Specifies email address to use in MAIL FROM\n","ConfigCascadeAware":false,"Version":"2.8.0","Package":"open-xchange-guard","Default":null,"File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.guestSMTPMailFrom","Reloadable":false,"Tags":["Guests","E-Mail"]},{"Description":"This property specifies the interval in seconds to check the RSA cache and re-populate if \nless than com.openexchange.guard.rsaCacheCount<\/a>.\nOnly applies if com.openexchange.guard.rsaCache<\/a> is enabled. \n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.rsaCache<\/a>","com.openexchange.guard.rsaCacheCount<\/a>"],"Version":"2.4.0","Package":"open-xchange-guard","Default":"30","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.keyCacheCheckInterval","Reloadable":false,"Tags":["Keymanagement"]},{"Description":"PGP Keys can have an expiration date. Set the number of days the keys will be valid for. \nThe user will have to create new keys after this date. Set to 0 for no expiration date.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"3650","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.keyValidDays","Reloadable":false,"Tags":["Keymanagement"]},{"Description":"Outgoing e-mails all get assigned a mailID. This is usually in a format of\na random ID followed by a domain. If empty, this domain will be\nthe AppSuite domain from com.openexchange.guard.externalEmailURL<\/a>\nOther domain can be configured here\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":null,"File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.mailIdDomain","Reloadable":false,"Tags":["Guests","E-Mail"]},{"Description":"Mail resolver URL. Guard needs to be able to lookup an email\naddress against the list of OX users. By default, it will\ntry to do this against the OX backend. If there is a custom\nmail resolver, set it here. The email address will be appended to\nthe end of the URL.

More details here: http:\/\/oxpedia.org\/wiki\/index.php?title=AppSuite:GuardMailResolver<\/a>\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.mailResolverUrl.basicAuthUsername<\/a>","com.openexchange.guard.mailResolverUrl.basicAuthPassword<\/a>"],"Version":"2.4.0","Package":"open-xchange-guard","Default":null,"File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.mailResolverUrl","Reloadable":false,"Tags":["Keymanagement","Mail-Resolver","E-Mail"]},{"Description":"Specifies the username for the basic HTTP authentication used for accessing the mail resolver.\nIf no username is specified here, com.openexchange.guard.restApiUsername<\/a> will be used as fallback (default).

More details here: http:\/\/oxpedia.org\/wiki\/index.php?title=AppSuite:GuardMailResolver<\/a>\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.mailResolverUrl<\/a>"],"Version":"2.8.0","Package":"open-xchange-guard","Default":null,"File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.mailResolverUrl.basicAuthUsername","Reloadable":false,"Tags":["Keymanagement","Mail-Resolver","E-Mail","Credentials"]},{"Description":"Specifies the password for the basic HTTP authentication used for accessing the mail resolver.\nIf no password is specified here, com.openexchange.guard.restApiPassword<\/a> will be used as fallback (default)

More details here: http:\/\/oxpedia.org\/wiki\/index.php?title=AppSuite:GuardMailResolver<\/a>\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.mailResolverUrl<\/a>"],"Version":"2.8.0","Package":"open-xchange-guard","Default":null,"File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.mailResolverUrl.basicAuthPassword","Reloadable":false,"Tags":["Keymanagement","Mail-Resolver","E-Mail","Credentials"]},{"Description":"Max number of connections to same URL (route).\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"50","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.maxHttpConnections","Reloadable":false,"Tags":["Network"]},{"Description":"Max number of connections from Guard to backends.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"50","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.maxTotalConnections","Reloadable":false,"Tags":["Network"]},{"Description":"Minimum password length for Guard PGP keys.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"6","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.minPasswordLength","Reloadable":false,"Tags":["Keymanagement","Security"]},{"Description":"Length of the randomly generated passwords when a user resets password.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"10","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.newPassLength","Reloadable":false,"Tags":["Keymanagement","Security"]},{"Description":"When creating a new Guest, option to send them a first password\nin a seperate email, or let them assign password on first login.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"false","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.newGuestsRequirePassword","Reloadable":false,"Tags":["Keymanagement","Security"]},{"Description":"If the user should not be able to delete the private keys, only retract, select true here.\nCan also set configuration cascade value 'com.openexchange.capability.guard-nodeleteprivate=true'.\nIf either is true, then the user won't be able to delete his\/her keys\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"false","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.noDeletePrivate","Reloadable":false,"Tags":["Keymanagement","Security"]},{"Description":"Option to deny users the ability to delete the password recovery.\nThere will be no way to retrieve the password if the recovery is deleted and the user forgets\ntheir password. Users, though, may want to delete the recovery for security reasons.

Can also set configuration cascade value 'com.openexchange.capability.guard-nodeleterecovery=true'.\nIf either is true, then the user will not be able to delete their password recovery\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.noRecovery<\/a>"],"Version":"2.4.0","Package":"open-xchange-guard","Default":"false","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.noDeleteRecovery","Reloadable":false,"Tags":["Keymanagement","Security"]},{"Description":"Enables or disables password recovery.

If password recovery is disabled, then there will be no way to recover passwords. \nThis will increase the security of the system, but will result in complete data loss if password\nis lost.

Can also set configuration cascade value 'com.openexchange.capability.guard-norecovery=true'.\nIf either is true, then no recovery will be available.\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.noDeleteRecovery<\/a>"],"Version":"2.4.0","Package":"open-xchange-guard","Default":"false","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.noRecovery","Reloadable":false,"Tags":["Keymanagement","Security"]},{"Description":"HTTP connections to the backend are kept open for faster response. \nThis is the timeout setting that will close idle connections.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"60","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.oxBackendIdleTime","Reloadable":false,"Tags":["Network"]},{"Description":"URL used to communicated directly with the OX backend.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"\/ajax\/","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.oxBackendPath","Reloadable":false,"Tags":["Network"]},{"Description":"Port for communicating with the OX Backend\/REST API.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"8009","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.oxBackendPort","Reloadable":false,"Tags":["REST API"]},{"Description":"Specify the hostname \/ IP address of the Guard database.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"localhost","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.oxGuardDatabaseHostname","Reloadable":false,"Tags":["Database"]},{"Description":"Defines the connection timeout used for init connections to the guard database.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"15000","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.oxGuardDatabaseInitConnectionTimeout","Reloadable":false,"Tags":["Database"]},{"Description":"Optional read-only IP\/name for the OX Guard database that might be used in Master-Slave setups. \n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":null,"File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.oxGuardDatabaseRead","Reloadable":false,"Tags":["Database"]},{"Description":"Specify the hostname \/ IP address of Guard guest shards.\nThis is for the database shards used when sending to Guest users.\nDefines where the NEXT shard will go when created.\nStores the Guest keys.\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.shardSize<\/a>"],"Version":"2.4.0","Package":"open-xchange-guard","Default":"localhost","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.oxGuardShardDatabase","Reloadable":false,"Tags":["Database","Guests"]},{"Description":"Defines the connection timeout used for init connections to the shard database\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"15000","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.oxGuardShardDatabaseInitConnectionTimeout","Reloadable":false,"Tags":["Database","Guests"]},{"Description":"Optional read-only IP\/name for Guest database shards that might be used in Master-Slave setups.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":null,"File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.oxGuardShardRead","Reloadable":false,"Tags":["Database","Guests"]},{"Description":"Specifies the sender e-mail address for the password reset e-mail.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":null,"File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.passwordFromAddress","Reloadable":false,"Tags":["E-Mail","Keymanagement"]},{"Description":"Specifies the display name for the password reset e-mail.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":null,"File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.passwordFromName","Reloadable":false,"Tags":["E-Mail","Keymanagement"]},{"Description":"PGP Key's fetched from remote servers are stored in a cache for a set period of time\nbefore the remote servers are queried again. Set the time in days for the cache here.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"7","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.pgpCacheDays","Reloadable":false,"Tags":["Keymanagement","HKP Client","WKS Client"]},{"Description":"Max allowed size for remote keys found using HKP or WKS. Defaults to 150000 bytes\n","ConfigCascadeAware":false,"Version":"2.10.5","Package":"open-xchange-guard","Default":"150000","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.maxRemoteKeySize","Reloadable":false,"Tags":["Keymanagement","HKP Client","WKS Client"]},{"Description":"Enables or disables PIN based 2FA authentication for guest emails.\nThe sender assigns a randomly generated PIN to the new Guest account, and must\nconvey this number to the recipient however they choose (phone, sms, etc).\nPIN is required for the recipient to open any encrypted items or change password.

Note: \nThe capability com.openexchange.capability.guard-pin=true should be assigned\nto any user\/context that you want the pin functionality enabled. \nAvailable in guard-api.properties file.\n","ConfigCascadeAware":false,"Version":"2.10.0","Package":"open-xchange-guard","Default":null,"File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.pinEnabled","Reloadable":false,"Tags":["E-Mail","Guests","2FA"]},{"Description":"For customizing the product name, you can redefine the name here.\nThis name will be used like \"Guided tour for Name\" or \"Name Security Settings\"\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":null,"File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.productName","Reloadable":false,"Tags":["Customizing"]},{"Description":"Defines the version of the 'Upgrader'\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"7","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.upgrader.version","Reloadable":false,"Tags":["Upgrade"]},{"Description":"Total amount of time that Guard should search for remote keys before giving up in ms\n","ConfigCascadeAware":false,"Version":"2.10.0","Package":"open-xchange-guard","Default":"10000","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.remoteKeyLookupTimeout","Reloadable":false,"Tags":["Keymanagement","HKP Client","WKS Client"]},{"Description":"Specify the hostname of the Open-Xchange REST API server. \nThe REST API is a service on the Open-Xchange backend. Use localhost in case that the Guard service\nis deployed on the same system as the Open-Xchange backend. In case that the REST\nAPI is deployed on a separate system ensure that Guard can connect, see clustering\ndocumentation for Guard for more details.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"localhost","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.restApiHostname","Reloadable":false,"Tags":["REST API"]},{"Description":"Specify the authentication password for the basic HTTP authentication\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":null,"File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.restApiPassword","Reloadable":false,"Tags":["REST API","Credentials"]},{"Description":"Specify the authentication username for the basic HTTP authentication\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":null,"File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.restApiUsername","Reloadable":false,"Tags":["REST API","Credentials"]},{"Description":"This property controlls if RSA keys are pre-generated in the background, encrypted, and\nstored for future user keys. RSA key generation is the most time consuming function and \nthe RSA cache significantly improves new user creation time.\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.keyCacheCheckInterval<\/a>","com.openexchange.guard.rsaCacheCount<\/a>"],"Version":"2.4.0","Package":"open-xchange-guard","Default":"true","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.rsaCache","Reloadable":false,"Tags":["Keymanagement"]},{"Description":"Number of RSA keys to pre-generate if com.openexchange.guard.rsaCache<\/a> is enabled.\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.keyCacheCheckInterval<\/a>","com.openexchange.guard.rsaCache<\/a>"],"Version":"2.4.0","Package":"open-xchange-guard","Default":"100","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.rsaCacheCount","Reloadable":false,"Tags":["Keymanagement"]},{"Description":"Bit certainty for RSA key generation. Higher numbers assure the number is in fact prime \nbut time consuming. Lower is much faster. May need to be lower if not using cache\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"256","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.rsaCertainty","Reloadable":false,"Tags":["Keymanagement"]},{"Description":"Specify encryption strength and length of OX Guard genereated PGP keys.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"2048","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.rsaKeyLength","Reloadable":false,"Tags":["Keymanagement"]},{"Description":"Specifies if a replay to an encrypted E-Mail must also be encrypted.\n","ConfigCascadeAware":true,"Version":"2.4.0","Package":"open-xchange-guard","Default":"true","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.secureReply","Reloadable":false,"Tags":["E-Mail"]},{"Description":"Guest users data are placed in databases oxguard_x. After set number of users, another database shard is created\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.dbSchemaBaseName<\/a>","com.openexchange.guard.oxGuardShardDatabase<\/a>"],"Version":"2.4.0","Package":"open-xchange-guard","Default":"10000","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.shardSize","Reloadable":false,"Tags":["Database","Guests"]},{"Description":"Use TLS when delivering to the SMTP server when available.\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.guestSMTPServer<\/a>"],"Version":"2.4.0","Package":"open-xchange-guard","Default":"true","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.useStartTLS","Reloadable":false,"Tags":["Network","E-Mail","Security"]},{"Description":"Defines the template identifier.\n","ConfigCascadeAware":true,"Version":"2.4.0","Package":"open-xchange-guard","Default":"0","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.templateID","Reloadable":false,"Tags":["Customizing"]},{"Description":"Specifies the path for the templates.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":"\/opt\/open-xchange\/templates\/guard","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.templatesDirectory","Reloadable":false,"Tags":["Customizing"]},{"Description":"A threshold value to define which key sources are trusted.\nEvery key source with a trust value equals or higher than this value is considered to be marked as \"trusted\".\nThe trustlevel can give a hint to the client\/enduser if a fetched recipient's key could be trustable.\n","ConfigCascadeAware":false,"Version":"2.10.0","Package":"open-xchange-guard","Default":"4","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.keySources.trustThreshold","Reloadable":false,"Tags":["Keymanagement","Key trust"]},{"Description":"The trust level for keys created by OX Guard.\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.keySources.trustThreshold<\/a>"],"Version":"2.10.0","Package":"open-xchange-guard","Default":"5","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.keySources.trustLevelGuard","Reloadable":false,"Tags":["Keymanagement","Key trust"]},{"Description":"The trust level for keys uploaded by a user.\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.keySources.trustThreshold<\/a>"],"Version":"2.10.0","Package":"open-xchange-guard","Default":"4","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.keySources.trustLevelGuardUserUploaded","Reloadable":false,"Tags":["Keymanagement","Key trust"]},{"Description":"The trust level for keys uploaded by a user and shared among users in the same context.\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.keySources.trustThreshold<\/a>"],"Version":"2.10.0","Package":"open-xchange-guard","Default":"3","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.keySources.trustLevelGuardUserShared","Reloadable":false,"Tags":["Keymanagement","Key trust"]},{"Description":"Specify the base domain for generated links, such as used in support. Used with uiWebPath to construct URL links. Example https:\/\/baseDomain\/uiWebPath\/link\n","ConfigCascadeAware":false,"Version":"2.10.0","Package":"open-xchange-guard","Default":null,"File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.baseDomain","Reloadable":false,"Tags":["Link","Domain"]},{"Description":"Specify the master key index to use for newly created keys. This key is used to encrypt database entries for the user. The master keys must already exist \n","ConfigCascadeAware":true,"Version":"2.10.5","Package":"open-xchange-guard","Default":"0","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.masterKeyIndex","Reloadable":false,"Tags":["Keymanagement"]},{"Description":"Specify the path for the oxguardpass files. Default location is \/opt\/open-xchange\/guard \n","ConfigCascadeAware":false,"Version":"2.10.5","Package":"open-xchange-guard","Default":"\/opt\/open-xchange\/guard","File":"guard-core.properties","Feature":"Basic OX Guard configuration","Key":"com.openexchange.guard.masterKeyPath","Reloadable":false,"Tags":["Keymanagement"]},{"Description":"Defines the storage directory for files in case of that the storage\nplugin is use open-xchange-guard-file-storage.

Note: This directory needs to be shared between guard nodes.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard-file-storage","Default":"\/var\/spool\/open-xchange\/guard\/uploads","File":"guard-file.properties","Feature":"File storage","Key":"com.openexchange.guard.storage.file.uploadDirectory","Reloadable":false,"Tags":["File Storage"]},{"Description":"Defines if Guard should only establish secure TLS connections to HKP servers queried via DNS SVR lookup.\n","ConfigCascadeAware":false,"Version":"2.8.0","Package":"open-xchange-guard","Default":"false","File":"guard-core.properties","Feature":"HKP Client","Key":"com.openexchange.guard.forceTLSForHKPSRV","Reloadable":false,"Tags":["HKP Client"]},{"Description":"Defines servers for remote public Key lookup. You can list trusted<\/b> PGP Servers here, preferably\nservers that have verified keys. Comma separated list. Can specify port.\nHTTPS only on port 443. In addition it is possible to add an optional base request path;\nfor example \"hkp:\/\/example.org:11371\/custom\/path\/to\/pks\/lookup?\".\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.trustLevelHKPTrustedServer<\/a>"],"Version":"2.4.2","Package":"open-xchange-guard","Default":"","File":"guard-core.properties","Feature":"HKP Client","Key":"com.openexchange.guard.trustedPGPDirectory","Reloadable":false,"Tags":["HKP Client"]},{"Description":"Defines servers for remote public Key lookup. You can list untrusted<\/b>, public, PGP Servers here, preferably\nservers that have verified keys. Comma separated list. Can specify port.\nHTTPS only on port 443. In addition it is possible to add an optional base request path;\nfor example \"hkp:\/\/example.org:11371\/custom\/path\/to\/pks\/lookup?\".\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.trustLevelHKPPublicServer<\/a>"],"Version":"2.4.2","Package":"open-xchange-guard","Default":"","File":"guard-core.properties","Feature":"HKP Client","Key":"com.openexchange.guard.untrustedPGPDirectory","Reloadable":false,"Tags":["HKP Client"]},{"Description":"The trust level for keys fetched from public HKP servers.\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.keySources.trustThreshold<\/a>"],"Version":"2.10.0","Package":"open-xchange-guard","Default":"1","File":"guard-core.properties","Feature":"HKP Client","Key":"com.openexchange.guard.keySources.trustLevelHKPPublicServer","Reloadable":false,"Tags":["HKP Client","Keymanagement","Key trust"]},{"Description":"The trust level for keys fetched from HKP servers marked as trusted.\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.keySources.trustThreshold<\/a>"],"Version":"2.10.0","Package":"open-xchange-guard","Default":"5","File":"guard-core.properties","Feature":"HKP Client","Key":"com.openexchange.guard.keySources.trustLevelHKPTrustedServer","Reloadable":false,"Tags":["HKP Client","Keymanagement","Key trust"]},{"Description":"The trust level for keys fetched from HKP servers queried via SRV DNS record.\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.keySources.trustThreshold<\/a>"],"Version":"2.10.0","Package":"open-xchange-guard","Default":"4","File":"guard-core.properties","Feature":"HKP Client","Key":"com.openexchange.guard.keySources.trustLevelHKPSRVServer","Reloadable":false,"Tags":["HKP Client","Keymanagement","Key trust"]},{"Description":"The trust level for keys fetched from HKP servers queried via DNSSEC protected SRV DNS record.\n","ConfigCascadeAware":false,"Related":["com.openexchange.guard.keySources.trustThreshold<\/a>"],"Version":"2.10.0","Package":"open-xchange-guard","Default":"4","File":"guard-core.properties","Feature":"HKP Client","Key":"com.openexchange.guard.keySources.trustLevelHKPSRVDNSSECServer","Reloadable":false,"Tags":["HKP Client","Keymanagement","Key trust"]},{"Description":"PGP lookup server white-list. The PGP public key server normally\nonly shares keys that have already been created unless the\nthe recipient and sender are local. This prevents DOS attacks\nwith multiple PGP Public key searches for users that don't have\nkeys generated yet. If, however, you have a trusted sender \/ PGP\nlookup, you can add the IP address here. PGP Public key requests\nfrom this key range will result in keys generated for the recipients\nas long as they have an AppSuite account.

Comma delim CDIR notation or distinct IP. eg \"= 10.0.100.0\/24, 192.168.10.3\"\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard","Default":null,"File":"guard-core.properties","Feature":"HKP Server","Key":"com.openexchange.guard.dns.publicKeyWhitelist","Reloadable":false,"Tags":["HKP Server","Keymanagement"]},{"Description":"Specifies which script to use for encrypting incoming emails\n","ConfigCascadeAware":false,"Version":"2.10.4","Package":"open-xchange-mailfilter","Default":"guard.sh","File":"mailfilter.properties","Feature":"Mail Filter","Key":"com.openexchange.mail.filter.guard.guardEncryptScript","Reloadable":true,"Tags":["Mail Filter","Mail","Sieve","Guard"]},{"Description":"Specifies which script to use to verify signatures of incoming emails\n","ConfigCascadeAware":false,"Version":"2.10.4","Package":"open-xchange-mailfilter","Default":"guard-sig.sh","File":"mailfilter.properties","Feature":"Mail Filter","Key":"com.openexchange.mail.filter.guard.guardSignatureScript","Reloadable":true,"Tags":["Mail Filter","Mail","Sieve","Guard"]},{"Description":"Specifies if Guard sieve actions\/tests should be available\n","ConfigCascadeAware":false,"Version":"2.10.4","Package":"open-xchange-mailfilter","Default":"false","File":"mailfilter.properties","Feature":"Mail Filter","Key":"com.openexchange.mail.filter.guard.sieveEnabled","Reloadable":true,"Tags":["Mail Filter","Mail","Sieve","Guard"]},{"Description":"Configures the AWS access key to use. Required if storage type is S3.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard-s3-storage","Default":null,"File":"guard-s3.properties","Feature":"S3 storage","Key":"com.openexchange.guard.storage.s3.accessKey","Reloadable":false,"Tags":["S3 Storage"]},{"Description":"Specifies the name of the parent bucket to use. The bucket will be created\nautomatically if it not yet exists, however, it's still possible to use an\nalready existing one. There are some naming restrictions, please refer to\nhttp:\/\/docs.aws.amazon.com\/AmazonS3\/latest\/dev\/BucketRestrictions.html for\ndetails. Required if storage type is S3.\n","ConfigCascadeAware":false,"Version":"2.4.0","Package":"open-xchange-guard-s3-storage","Default":null,"File":"guard-s3.properties","Feature":"S3 storage","Key":"com.openexchange.guard.storage.s3.bucketName","Reloadable":false,"Tags":["S3 Storage"]},{"Description":"Configures the Amazon S3 region to use when creating new buckets. \nThis value is also used to pre-configure the client when no specific endpoint is set.\nWill only be used if endpoint is not configured.

Possible values are:\n