Server Agent configuration files

The following table describes the purpose and function of each of the Server Agent configuration files.

Server Agent configuration (and the events.sq3 log) files are stored in drive:\Program Files\Venafi\Agent\Data\ on Windows, and in /var/opt/venafi/agent/data/ and on Linux and Unix.

Server Agent Configuration Files

File	Description
config.sql	Stores the base configuration of the Server Agent and is only read the first time that the agent is run. The agent creates the config.sq3 file the first time it executes, and then it no longer reads config.sql, except in rare cases where it cannot locate the config.sq3.
config.sq3	Stores the current configuration of the agent. This file is created from config.sql when the agent runs for the first time. Each time the agent checks in, the config.sq3 file is updated if the configuration on the Trust Protection Platform server has changed.
curl-ca-bundle.crt	Stores trust anchors (e.g., root certificates) used to validate the Trust Protection Platform server SSL certificate.
curl-crl	Stores a cached copy of the certificate revocation list (CRL) until the CRL expires).
libsshmgmt.sq3	Stores SSH configuration and scanning results, including file checksums. After the initial scan, the SSH scanner compares the checksum of files with the previous results in libsshmgmt.sq3. To minimize processing cycles, the file is not scanned if the checksum has not changed. TIP To force the SSH scanner to resubmit all discovery results, delete this file.
libksscan.sq3	Stores certificate discovery module scanning results. After the initial scan and check-in (when all discovered certificates are submitted to the server), the module only submits new and removed certificates (called deltas) to the Trust Protection Platform server. TIP To force the certificate scanner to resubmit all discovery results, delete this file.