dmcreateencryptionprofile - Create encryption profiles

Use this command to create encryption profiles.

Syntax

dmcreateencryptionprofile -n name [-pf private_key_store_file] [-pp private_key_store_password | 
env:private_key_store_env] [-pt JKS | JCEKS | PKCS12] [-tf trust_store_file] -[tp trust_store_password | 
env:trust_store_env] [-tt JKS | JCEKS | PKCS12] [-e ENABLED | DISABLED | REQUIRED | ALWAYS] [-L locale]

Parameters

-n name
Specifies the name of the encryption profile.
-pf private_key_store_file
Specifies the absolute path to the private key store file.
-pp private_key_store_password | env:private_key_store_env
Specifies the password or the environment variable that contains the password for the private key store file.
-pt JKS | JCEKS | PKCS12
Specifies the keystore type of the private key store file.
-tf trust_store_file
Specifies the absolute path to the trust store file.
-tp trust_store_password | env:trust_store_env
Specifies the password or the environment variable that contains the password for the trust store file.
-tt JKS | JCEKS | PKCS12
Specifies the keystore type of the trust store file.
-e ENABLED | DISABLED | REQUIRED | ALWAYS
Specifies whether TLS encryption is enabled for communication with clients and other datastores.
-a MUTUAL | SERVER
Specifies the TLS authentication type for communication with clients and other datastores.
-L locale
Specifies the locale of the CDC Replication instance. The default is the machine locale.

Result

This command returns a value of 0 if the command was successful and a non-zero value if the command fails.

Example

dmcreateencryptionprofile -n Profile1 -pf /path/to/privatekey.jks -pp env:PKSPASS -pt JKS -tf /path/to/trust.jks -tp env:TSPASS -tt JKS -e ENABLED

Creates the encryption profile Profile1 with passwords that are stored in the PKSPASS and TSPASS environment variables.