Manage keys with the IKEYCMD command line interface (Distributed systems)
IKEYCMD, the Java command line interface to iKeyman, provides the necessary options to create and manage keys, certificates and certificate requests.
Overview
Only use IKEYCMD, the command line interface, if we are unable to implement iKeyman, the graphical user interface.
To have a secure network connection, create a key for secure network communications and receive a certificate from a certificate authority (CA) that is designated as a trusted CA on our server. Use IKEYCMD, the utility command line interface, for configuration tasks that are related to public and private key creation and management.
The IKEYCMD user interface uses Java and native command line invocation, enabling iKeyman task scripting.
We cannot use IKEYCMD for configuration options that update the server configuration file, httpd.conf. For options that update the server configuration file, use the IBM HTTP Server administration server.
Procedure
- Use IKEYCMD to create key databases, public and private key pairs, and certificate requests.
- If we act as our own certificate authority (CA), we can use IKEYCMD to create self-signed certificates.
- If we act as our own CA for a private Web network, we have the option to use the server CA utility to generate and issue signed certificates to clients and servers in our private network.
Sub-topics
Use the gsk7cmd command
Key Management Utility command line options
Key Management Utility command line interface syntax
Key Management Utility command line parameters
Creating a new key database using the command-line interface
Manage the database password using the command line
Creating a new key pair and certificate request
Importing and exporting keys using the command line
Creating a self-signed certificate
Receiving a signed certificate from a certificate authority
Displaying default keys and certificate authorities
Storing a certificate authority certificate
Storing the encrypted database password in stash file