Novell ACCESS MANAGER 3.1 SP2 - README 2010, Manual

Page: 48 / 374

48 Novell Access Manager 3.1 SP2 Identity Server Guide
n
ov
do
cx (e
n)
16
Ap
ril 20
10
The tool prompts you for a password for the keypass and the storepass. They must be the same
password if you are going to use card set protection rather than module protection.
The tool also prompts you for the certificate subject name (first name, last name, organization,
organizational unit, locality, state or providence, and country).
5 To generate a certificate request from a key in the keystore, enter the following command:
"c:\Program Files\Java\jdk1.5.0_14\jre\bin\java" -Dprotect=module
-DignorePassphrase=true sun.security.tools.KeyTool -certreq -alias
od93 -file cert.csr -keypass mypwd -keystore AMstore.jks -storepass
mypwd -storetype nCipher.sworld -provider
com.ncipher.provider.km.nCipherKM
Enter your values for the following parameters:
Parameter Description
-Dprotect=module
Required if you want the keystore to be module
protected.
-DignorePassphrase=true
Required if you want the keystore to be module
protected.
sun.security.tools.KeyTool The name of the keytool command
-alias A name that helps you identify the key. In this
sample configuration, the name is
od93 .
-keyalg The security algorithm.
-keystore A name for the keystore. In this sample
configuration, the name is
AMstore.jks .
-storetype The type of keystore. For nCipher, this must be
set to
nCipher.sworld .
-provider The name of the providerClass and
providerName. This is the provider that you
added to the
java.security file in Step 1 .
Parameter Description
-Dprotect=module Required if you want the keystore to be module
protected.
-DignorePassphrase=true Required if you want the keystore to be module
protected.
sun.security.tools.KeyTool The name of the keytool command
-certreq
The parameter that makes this a certificate
request.
-alias
A name that helps you identify the certificate
request. In this sample configuration, the name
is
od93
.
-file The name to be given to the certificate signing
request file. In this sample configuration, the
name is
cert.csr .