Vault Utility command

Purpose

The vault utility provides a command to create vaults. A vault is used to store encrypted secret values, and it is implemented as a Java keystore file.

Before you can issue a vault command, you have to run the dniprofile in your current shell, for example:
. /var/ftmswift_v300/run/dniprofile

create

The create command creates a new, empty vault.

Required access rights: Write permission on the file system
Predefined roles that provide required access rights: None

Format

Read syntax diagramSkip visual syntax diagram  dnpvault -create  -dir  directory  -store  vault  -passphrase  phrase

Parameters

-dir directory
The absolute or relative path to the directory in which to create the vault.
-store vault
The base name of the vault file. The file extension .jceks is appended automatically.
-passphrase phrase
The passphrase that protects the newly created vault. If this parameter is not specified as a command-line argument, the utility prompts for the passphrase.

Examples

The following command creates a new, empty vault file /var/ftmswift_v300/run/ftmswift_vault.jceks. The new vault is protected by passphrase x1y2z3.

dnpvault -create -dir /var/ftmswift_v300/run
         -store ftmswift_vault.jceks -passphrase x1y2z3

The following command creates a new, empty vault file my_vault.jceks in the current directory. It prompts for the passphrase that is to be used to protect the new vault. To prevent mistyping, the same passphrase must be entered twice.

dnpvault -create -dir . -store my_vault