dmcreateencryptionprofile - Create encryption profiles
Use this command to create encryption profiles.
Syntax
dmcreateencryptionprofile -n name [-pf private_key_store_file] [-pp private_key_store_password |
env:private_key_store_env] [-pt JKS | JCEKS | PKCS12] [-tf trust_store_file] -[tp trust_store_password |
env:trust_store_env] [-tt JKS | JCEKS | PKCS12] [-e ENABLED | DISABLED | REQUIRED | ALWAYS] [-L locale]
Parameters
- -n name
- Specifies the name of the encryption profile.
- -pf private_key_store_file
- Specifies the absolute path to the private key store file.
- -pp private_key_store_password | env:private_key_store_env
- Specifies the password or the environment variable that contains the password for the private key store file.
- -pt JKS | JCEKS | PKCS12
- Specifies the keystore type of the private key store file.
- -tf trust_store_file
- Specifies the absolute path to the trust store file.
- -tp trust_store_password | env:trust_store_env
- Specifies the password or the environment variable that contains the password for the trust store file.
- -tt JKS | JCEKS | PKCS12
- Specifies the keystore type of the trust store file.
- -e ENABLED | DISABLED | REQUIRED | ALWAYS
- Specifies whether TLS encryption is enabled for communication with clients and other datastores.
- -a MUTUAL | SERVER
- Specifies the TLS authentication type for communication with clients and other datastores.
- -L locale
- Specifies the locale of the CDC Replication instance. The default is the machine locale.
Result
This command returns a value of 0 if the command was successful and a non-zero value if the command fails.
Example
dmcreateencryptionprofile -n Profile1 -pf /path/to/privatekey.jks -pp env:PKSPASS -pt JKS -tf /path/to/trust.jks -tp env:TSPASS -tt JKS -e ENABLED
Creates the encryption profile Profile1 with passwords that are stored in the PKSPASS and TSPASS environment variables.