server task sms key change

Forces the creation of a new session management key.

You might want to forcibly create a key when you suspect that the existing key was compromised.

Syntax

server task server_name–host_name sms key change

Options

server_name–host_name

Specifies the name of the server or server instance. You must specify the server name in the exact format as it is shown in the output of the server list command.

For example, if the configured name of a single WebSEAL server on host cruz.dallas.ibm.com is default, the server_name would be default-webseald and the host_name would be example.dallas.ibm.com. For this example, the name of the server would be default-webseald-example.dallas.ibm.com.

If there are multiple configured server instances on the same computer, for example, the host cruz.dallas.ibm.com, and the configured name of the WebSEAL server instance is webseal2-webseald, the server_name is webseal2-webseald and the host_name is example.dallas.ibm.com. For this example, the name of the server instance would be webseal2-webseald-example.dallas.ibm.com.

Return codes

0: The command completed successfully.
1: The command failed. When a command fails, the pdadmin command provides a description of the error and an error status code in hexadecimal format (for example, 0x14c012f2). See "Error messages" in the IBM Knowledge Center. This reference provides a list of the Security Access Manager error messages by decimal or hexadecimal codes.

Note: This command is available only when the session management command-line extensions are installed to a hosting authorization server.

Example

The following example forcibly creates a session management key for the abc.ibm.com server:

pdadmin> server task default-webseald-abc.ibm.com key change