IBM WebSphere XS40, Command Reference Manual

Page: 265 / 1066

v
Creates the
alice
alias the specified
SS2.pem
secret key. The target key is
contained within the private cryptographic area, and is accessed with an
encrypted password aliased by
HavredeGrace
.
# sskey alice SS2.pem
password-alias HavredeGrace
Creating key 'alice'
#
v
Deletes the
alice
shared secret key alias.
# no sskey alice
Key 'alice' deleted
#
test password-map
Tests the association between an encrypted password alias and a file. Confirms or
denies that the alias references the password that protects the file.
Syntax
test password-map alias type URL
Parameters
alias Specifies the name of the candidate alias.
type Identifies the file type. Use the value key or cert .
URL Specifies a local URL that identifies the file that contains the certificate or
key.
v
If stored in the public cryptographic area, takes the
pubcert: filename
form.
v
If stored in the private cryptographic area, takes the
filename
form.
Guidelines
Assuming syntactical correctness, testing a key or certificate file that does not
require a password will succeed in all cases.
Note:
The
test password-map
command cannot be used in a startup configuration.
If found, the script ignores the command.
Related Commands
certificate , key , password-map
Examples
v Indicates that the towson candidate alias does not reference the encrypted
password that protects the dpSupplied.der certificate file.
# test
password-map towson cert pubcert:dpSupplied.der
Alias 'towson' with file 'pubcert:dpSupplied.der' --> FAIL
#
v
Indicates that the
dundaulk
candidate alias does reference the encrypted
password that protects the
dpSupplied.der
certificate file.
# test password-map dundaulk
cert pubcert:dpSupplied.der
Alias 'dundaulk' with file 'pubcert:dpSupplied.der' --> OK
#
Chapter 11. Crypto configuration mode
239