IBM WebSphere XS40, Справочник по командам

Страница: 252 / 1066

CAUTION:
Do not store private key files in the public cryptographic area. This
area is intended for the storage of public certificate files.
password password
Optionally identifies the plaintext password required to access the private
key file.
password-alias password-alias
Optionally identifies the alias for the encrypted password required to
access the private key file.
Guidelines
The
password
or
password-alias
keyword is required only when a key file is
password-protected.
Before using the password-alias keyword, you must use the password-map
command to 3DES-encrypt the key password and associate an alias with the
encrypted password. An attempt to reference an encrypted password not found in
the Password map results in command failure.
v In environments that use plaintext (unencrypted) passwords, the password
argument opens and reads the key file.
v
In environments that use encrypted passwords, the password-alias argument is
used to search for the password map file and to identify its associated encrypted
password. The encrypted password in turn is then 3DES-decrypted (with the
locally generated host key) to yield the plaintext password that opens and reads
the key file.
Use the key command in conjunction with the certificate and idcred commands to
create an Identification Credentials that consists of a certificate, which contains a
public key, and the corresponding private key.
Use the no key command to delete only the alias for the stored private key. The
file that contains the actual key remains on the appliance.
Related Commands
certificate
,
idcred
,
password-map
Examples
v
Creates the
bob
alias for the
K2.pem
private key. The target key is in the private
cryptographic storage area.
# key bob K2.pem
Creating key 'bob'
#
v
Creates the
bob
alias for the
K2.der
private key. The target key is in the private
cryptographic area, and is accessed with the
annapolis
plaintext password.
# key bob K2.der password annapolis
Creating key 'bob'
#
v
Creates the
bob
alias for the
K2.der
private key. The target key is in the private
cryptographic area, and is accessed with the
towson
encrypted password aliased.
# key bob K2.der password-alias towson
Creating key 'bob'
#
v
Deletes the
bob
private key alias.
226
Command Reference