IBM Tivoli Monitoring, Version 6.3 Fix Pack 2

Using the GSKit command-line interface to work with key databases and certificates

The GSKit command line tool installed with each IBM® Tivoli® Monitoring component on a distributed platform and is used to manage key files and certificates.

For information about the GSKit command-line interface, see the IBM Global Security Kit GSKCapiCmd V8.0 User's Guide.

Before you begin

The following table lists the terms that are used in procedures involving the GSKit. Most terms are based upon the directory in which the IBM Tivoli Monitoring component and GSKit are installed:

<authclidir>

The directory into which the IBM Tivoli Monitoring component is installed. For example:

c:\IBM\ITM or /opt/IBM/ITM for the monitoring server, automation server, portal server, tacmd CLI, and agents
c:\IBM\TivoliMonitoring or /opt/IBM/TivoliMonitoring for the tivcmd CLI

<interp>

The machine specific interp. For example, sol296, li6263, or aix536.

<gskithome>

The directory into which the GSKit is installed.

Windows 32-bit: <itmcompdir>\GSK8.
Windows 64-bit: <itmcompdir>\GSK8_64.
Linux and UNIX 32-bit: <itmcompdir>/<interp>/gs
Linux and UNIX 64-bit: <itmcompdir>/<interp>/gs

<gskittoolcmd>

The actual GSKit CLI command syntax.

Windows 32-bit: <gskithome>\bin\gsk8capicmd.exe
Windows 64-bit: <gskithome>\bin\gsk8capicmd_64.exe
Linux and UNIX 32-bit: ./<gskithome>/bin/gsk8capicmd.exe
Linux and UNIX 64-bit: ./<gskithome>/bin/gsk8capicmd_64.exe

<keydbdir>

The directory into which the default key database is stored.

Windows: <itmcompdir>\keyfiles
Linux and UNIX: <itmcompdir>/keyfiles

<oldkeydbname>

The base name of the key database installed with the IBM Tivoli Monitoring component. This base key database name is keyfile. The four files associated with this key database are: keyfile.crl, keyfile.kdb, keyfile.rdb, and keyfile.sth.

<oldkeydb>

The name of the key database installed with the IBM Tivoli Monitoring component. This key database name is <oldkeydbname>.kdb.

<oldkeydbpw>

The installed key database password. The default is IBM61TIV.

<newkeydbname>

The base name of the new key database. Any name other than keyfile can be chosen. For example, itmcompkeyfile.

<newkeydb>

The name of the new key database. This key database name is <newkeydbname>.kdb.

<newkeydbpw>

The password associated with the new key database. Any valid password can be chosen.

Setting the path to invoke the GSKit command-line tool

In order to run the GSKit command line tool, the GSKit tool lib directory must be included in the system path.

32-bit

set PATH=<gskithome>\lib;%PATH%
cd <gskithome>\bin

64-bit

set PATH=<gskithome>\lib64;%PATH%
cd <gskithome>\bin

32-bit

export LD_LIBRARY_PATH=<gskithome>/lib:$LD_LIBRARY_PATH
cd <gskithome>/bin

64-bit

export LD_LIBRARY_PATH=<gskithome>/lib64:$LD_LIBRARY_PATH
cd <gskithome>/bin

Feedback