Migrate from key ring files to storage files

Installation Manager uses the Equinox Secure Storage mechanism from Eclipse to store credentials. The storage mechanism requires mandatory encryption and is replacing the key ring file. The key ring file is deprecated. There is not a migration path from the key ring files to the storage files because of the differences in the file structures. We must create a storage file to replace the key ring file.


Create a storage file

If we are storing credentials for a service repository, we must have an IBM user name and password. To register for an IBM user name and password, go to: http://www.ibm.com/account/profile. After upgrading to version 1.7 or later, we cannot authenticate with secure storage files that were created in an earlier version. We must re-create those secure storage files.

Procedure

  1. Create a master password file.

    The master password file is a text file that contains a passphrase. An example of a passphrase is:

      This text is the master password.

    To secure this file, set permissions to restrict access to this file as appropriate for your operating system.

    Create a storage file:

      cd tools directory
      imutilsc saveCredential -url address | -passportAdvantage -userName user_name -userPassword password -secureStorageFile storage_file -masterPasswordFile master_password_file

    OS Command
    Windows imutilsc saveCredential -url http://myServer -userName myUserName -userPassword myPassword -secureStorageFile C:\credential.store -masterPasswordFile C:\master_password_file.txt
    UNIX ./imutilsc saveCredential -url http://myServer -userName myUserName -userPassword myPassword -secureStorageFile /home/credential.store -masterPasswordFile /home/user/master_password_file.txt

    If we use the IBM service repositories, we can specify the http://www.ibm.com/software/repositorymanager/entitled/repository.xml value for the -url option. This value is a generic service repository that can be used for IBM packages.

  2. Use the storage file on the command line.

    OS Command
    Windows imcl.exe input response_file -secureStorageFile C:\credential.store -masterPasswordFile C:\master_password_file.txt -acceptLicense
    UNIX ./imcl input response_file -secureStorageFile /home/credential.store -masterPasswordFile /home/user/master_password_file.txt -acceptLicense

  3. Review your scripts, commands, and response files for references to key ring files. Replace the reference to the key ring file with a reference to the storage file.
Home