Set our system environment for using iKeyman
This topic provides detailed information on tasks that we can perform using the IBM Key Management utility (iKeyman). This information does not explain how to configure security options that require updates to the server configuration file.
Overview
The iKeyman user interface is Java-based and uses the Java support that is installed with IBM HTTP Server.IBM HTTP Server V6.1 installs a java virtual machine (JVM) for iKeyman. Using iKeyman with a JVM, other than the one installed by IBM HTTP Server is not supported.
If we are unable to open iKeyman, take the following actions:
Procedure
Rename and move the $JAVA_HOME/jre/lib/ext/gskikm.jar file to a directory that is not visible to the JDK class path, extdirs, or bootclasspath. For example, on Linux platforms: mv $JAVA_HOME/jre/lib/ext/gskikm.jar to /gskfiles/gskikm.jar.org
What to do next
Installing unlimited strength JCE policy files (optional). You may experience a certificate problem when we open a certificate that has a key with a higher level of cryptography than our policy files permits.
- For HP-UX and Solaris platforms with IBM HTTP Server V6.0 or higher, or IBM Java 142, download and install the files Sun - http://java.sun.com/j2se/1.4.2/download.html.
- For all other platforms, download and install the files from IBM - https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=jcesdk.
- Find the maximum key sizes permitted by key type with the default policy files at http://java.sun.com/j2se/1.4.2/docs/guide/security/jce/JCERefGuide.html#AppE.
Related information
Manage keys with the iKeyman graphical interface (Distributed systems)