Brocade Communications Systems Network Advisor 12.0.0, User Manual

Page: 621 / 1505

Brocade Network Advisor SAN User Manual 573
53-1002696-01
Steps for connecting to a TKLM appliance
20
For Windows:
<installed directory>\ibm\tivoli\tiptklmV2\bin\wsadmin.bat -username
TKLMAdmin -password <password> -lang jython
2. Check the certificate list using the following command:
print AdminTask.tklmCertList('[]')
The listing will contain the UUID for all certificates. Use the UUID of the server certificate to
export the server certificate from the database to the file system.
print AdminTask.tklmCertExport('[
-uuid <UUID of the certificate>
-fileName <filename> -format DER]')
3. Exit the wsadmin CLI
After export, the TKLM server certificate is at the following location:
For LINUX:
<installed directory>/ibm/tivoli/tiptklmV2/products/tklm/
For Windows:
<installed directory>\ibm\tivoli\tiptklmV2\products\tklm\
4. Transfer the TKLM certificate that was previously exported into the TKLM server file system to
the Management application host using any binary file transfer mechanism via SCP, USB, or
FTP.
Importing the TKLM certificate into the group leader
The TKLM certificate must be imported from the location on the host to the encryption group leader
node. The encryption group leader exports the certificate to group member switches.
1. Select Configure > Encryption from the menu task bar to display the Encryption Center
dialog box. (Refer to Figure 185 on page 526.)
2. Select a switch from the Encryption Center Devices table, then select Switch > Import
Certificate from the menu task bar.
The Import Signed Certificate dialog box displays ( Figure 205 ).
FIGURE 205 Import Signed Certificate dialog box
3. Browse to the location where the signed certificate is stored, then click OK.
The signed certificate is stored on the switch.