You can configure a pass phrase in the mf-server.dat file. See To Configure the Passphrase in a File for more information. Alternatively, you can set it before you start the enterprise server region. To set a pass phrase before you start the region in ESCWA:
Find your TLS-enabled listener. The Status column should indicate Stopped and the Status Log column should display OK.
This will display the Listener Properties.
This expands the security properties.
mfsecret:configuration-name:secret-path
or:
mfsecret::secret-path
or:
mfsecret:secret-path
The pass phrase is not tested against the certificate and keyfile until an attempt is made to start the listener.