WAS v8.5 > Reference > Command-line utilities

Liberty profile: securityUtility command

The securityUtility command supports plain text encryption and SSL certificate creation for a Liberty profile.

Syntax

The command syntax is as follows:

where the options are different based on the value of task.

Parameters

The following tasks are available for the securityUtility command:

encode

Encodes the provided text using Base64 encryption. If no arguments are specified, the command enters interactive mode. Otherwise, the provided text is encoded. Text with spaces must be put in quotation marks if specified as an argument.

createSSLCertificate

Creates a default SSL certificate for use in server configuration. Generated keystore file key.js is placed under /resources/security directory of the server specified in --server name. The key algorithm is RSA and signature algorithm is SHA1 with RSA. For more control over the certificate creation, use keytool directly.

The arguments are:

--server=name

Name of the Liberty profile server for keystore creation. Required.

--password=passwd

Password to be used in the keystore, which must be at least six characters in length. Required.

--validity=days

Number of days the certificate is valid, which must be equal to or greater than 365. Default is 365. This option is optional.

--subject=DN

Domain Name (DN) for the certificate subject and issuer. Default is CN=localhost,O=ibm,C=us. Optional.

help

Prints help information for a specified task.

Usage

The following examples demonstrate correct syntax: 

securityUtility encode GiveMeLiberty
securityUtility createSSLCertificate --server=myserver --password=mypassword --validity=365
                                     --subject=CN=mycompany,O=myOrg,C=myCountry
securityUtility help createSSLCertificate


Parent topic: Creating SSL certificates


Related


Creating SSL certificates
Configuring the web application and server for client certificate authentication
Configure an LDAP user registry with the Liberty profile
Configure a basic user registry for the Liberty profile


|