C++

Security Keys Setup
The trader keys, the associated Security Server and Certifying Authority key-files reside in the
member’s key file. These keys have .pem extensions. The name of the file is derived from the trader’s
mnemonic, for example, trader ABC will have a key-file named ABC.pem.
Each key-file is locked with the trader’s password, which will be distributed with the trader key. Every
trader must have their own key-file which must be visible on every machine used to logon to the
Trading Host. In addition, each trader must also be able to see the Security Server’s key-file
(server.pem) and the Certifying Authority’s key-file (cacert.pem).
Once the Security keys have been received, a folder or directory needs to be created on the PC or
Unix workstation used to access the environment, and the keys copied into this area. The API will
allow trader keys to be specified in known sub-directories under the current key-directory specified by
the LSAPI_KEYDIR environment variable.
Introduction to LIFFE CONNECT®
API_Functional_Descriptions8.0.2.Doc Version 1.3 Page 7 of 59
Note: Live keys and Testing keys cannot be kept in the same folder or directory. New replacement
keys that have different expiry dates should also be kept in a separate directory with the
associated new versions of the server.pem and cacert.pem key-files.
Setting System Environment Variables
Create a directory and set the environment variable on your machine as follows:
1. Create a local directory, eg. C:\KEYS\ for Windows 2000 compliant machines and
/usr/local/KEYS/ for Unix machines.
2. If multiple directories are required, there is a strict naming convention for the subdirectory. It must
be called keys1. The validation process only recognises correctly named subdirectories. All
subsequent subdirectories must follow in order, e.g. keys2 and keys3.
3. Set the following system environment variable:
LSAPI_KEYDIR
4. Set the environment variables value to the key location, i.e. C:\KEYS\ or /usr/local/KEYS/
Note: If this variable is not set, the API will not be able to locate the keys.