From c16750b149dbf8608a89d78e516baacc1c8b6f36 Mon Sep 17 00:00:00 2001
From: Hans Busch <47081128+HansBusch@users.noreply.github.com>
Date: Fri, 13 Mar 2026 02:31:41 +0100
Subject: [PATCH 1/3] Add attribute to signal estimated TLS activation time.

---
 wsdl/ver10/advancedsecurity/wsdl/advancedsecurity.wsdl | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/wsdl/ver10/advancedsecurity/wsdl/advancedsecurity.wsdl b/wsdl/ver10/advancedsecurity/wsdl/advancedsecurity.wsdl
index 163f9eb90..c4fa577bb 100644
--- a/wsdl/ver10/advancedsecurity/wsdl/advancedsecurity.wsdl
+++ b/wsdl/ver10/advancedsecurity/wsdl/advancedsecurity.wsdl
@@ -879,6 +879,11 @@
 						<xs:documentation>Indicates the maximum number of certification paths that may be assigned to the TLS server simultaneously.</xs:documentation>
 					</xs:annotation>
 				</xs:attribute>
+				<xs:attribute name="SetupDuration" type="xs:duration">
+					<xs:annotation>
+						<xs:documentation>Indication how long a change to the TLS server settings need to be activated.</xs:documentation>
+					</xs:annotation>
+				</xs:attribute>
 				<!-- ========================================= -->
 				<!-- Begin cert-based client auth capabilities -->
 				<!-- ========================================= -->

From 8d70014b63ddd55c80e2d5f25b09b0e2007acd03 Mon Sep 17 00:00:00 2001
From: HansBusch <47081128+HansBusch@users.noreply.github.com>
Date: Wed, 10 Jun 2026 12:39:21 +0200
Subject: [PATCH 2/3] Update annotation as requested. Add documentation.

---
 doc/Security.xml                                       | 7 +++++++
 wsdl/ver10/advancedsecurity/wsdl/advancedsecurity.wsdl | 2 +-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/doc/Security.xml b/doc/Security.xml
index cfd8c6535..d39a17bb0 100644
--- a/doc/Security.xml
+++ b/doc/Security.xml
@@ -3438,6 +3438,8 @@
             shall not be assigned to the TLS server.</para>
           <para>If the certification path identified by the supplied certification path ID is
             already assigned to the TLS server, this command shall have no effect.</para>
+          <para>Note that the configuration may not be immediately active (see capability
+            SetupDuration).</para>
           <variablelist role="op">
             <varlistentry>
               <term>request</term>
@@ -3588,6 +3590,7 @@
               </listitem>
             </varlistentry>
           </variablelist>
+          <para>Note that the configuration change may not be immediately active (see capability SetupDuration).</para>
         </section>
         <section>
           <title>GetAssignedServerCertificates</title>
@@ -5061,6 +5064,10 @@
                     versions.</para>
                 </entry>
               </row>
+              <row>
+                <entry>SetupDuration</entry>
+                <entry><para>Indication how long a change to the TLS server configuration needs to be activated.</para></entry>
+              </row>
             </tbody>
           </tgroup>
         </table>
diff --git a/wsdl/ver10/advancedsecurity/wsdl/advancedsecurity.wsdl b/wsdl/ver10/advancedsecurity/wsdl/advancedsecurity.wsdl
index c4fa577bb..3c923cdcc 100644
--- a/wsdl/ver10/advancedsecurity/wsdl/advancedsecurity.wsdl
+++ b/wsdl/ver10/advancedsecurity/wsdl/advancedsecurity.wsdl
@@ -881,7 +881,7 @@
 				</xs:attribute>
 				<xs:attribute name="SetupDuration" type="xs:duration">
 					<xs:annotation>
-						<xs:documentation>Indication how long a change to the TLS server settings need to be activated.</xs:documentation>
+						<xs:documentation>Indicates the maximum time taken for updated TLS server settings to take effect.</xs:documentation>
 					</xs:annotation>
 				</xs:attribute>
 				<!-- ========================================= -->

From feb4732c0269f274ae52824b683f7b7c9296f8ad Mon Sep 17 00:00:00 2001
From: HansBusch <47081128+HansBusch@users.noreply.github.com>
Date: Thu, 13 Aug 2026 12:30:29 +0200
Subject: [PATCH 3/3] Update the explanation as suggested by the WG.

---
 doc/Security.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/Security.xml b/doc/Security.xml
index d39a17bb0..d3f2ca6fa 100644
--- a/doc/Security.xml
+++ b/doc/Security.xml
@@ -5066,7 +5066,7 @@
               </row>
               <row>
                 <entry>SetupDuration</entry>
-                <entry><para>Indication how long a change to the TLS server configuration needs to be activated.</para></entry>
+                <entry><para>Indicates the maximum time taken for updated TLS server settings to take effect.</para></entry>
               </row>
             </tbody>
           </tgroup>