The iKeyman tool
The key-management program, iKeyman, is provided with IBM® SDK Java™ Technology Edition. It is a user-friendly GUI for managing key files, which is implemented as an applet.
IBM SDK Java Technology Edition, Version 8.0.2.10 is
available when you install IBM Security Directory
Suite.
The iKeyman utility is available on Windows in the <SDS_Install_Directory>\java\jre\bin directory,
on Linux® in the /opt/ibm/ldap/V8.0.1.x/java/jre/bin directory,
and on AIX® and Solaris systems
in the /opt/IBM/ldap/V8.0.1.x/java/jre/bin directory.
Note: If
you are prompted to set
JAVA_HOME, you can set it
to the java subdirectory of the IBM Security Directory
Suite.
If you use IBM Security Directory
Suite,
you also need to set the LIBPATH environment variable
as follows: - On Linux platform
-
$export LIBPATH=$JAVA_HOME/bin:$JAVA_HOME/jre/bin:$LIBPATH - On Windows platform
-
c:\> set LIB=%JAVA_HOME%\bin; %JAVA_HOME%\jre\bin; %LIB%
On AIX systems
use the LIBPATH environment variable to specify the
library path, and on Solaris systems use the LD_LIBRARY_PATH environment
variable.
Use iKeyman to create public-private key pairs and certificate requests,
receive certificate requests into a key database file, and manage keys in a key database file.
Note: When you set up Secure Sockets Layer communications, ensure that you use the correct key
database file type for your application. For example, applications that are based on IBM SDK Java Technology Edition such as the Web Administration
console require
JKS file types, while C-applications like Directory Server require
CMS key database file types.You can carry out the following tasks with iKeyman:
- Creating a key pair and requesting a certificate from a certificate authority
- Receiving a certificate into a key database file
- Managing keys and certificates
- Changing a key database password
- Showing information about a key
- Deleting a key
- Making a key the default key in the key database
- Creating a key pair and certificate request for self-signing
- Exporting a key
- Importing a key into a key database
- Designating a key as a trusted root
- Removing trusted root key designation
- Requesting a certificate for an existing key
- Migrating a keyring file to the key database format