dspfspass (display information about file system passphrases)
Display information about the encrypted file system passphrases stored on the appliance.
Purpose
You can encrypt queue manager file systems, and system file systems that contain IBM® MQ data. The passphrase for each encrypted file system is stored on the internal encrypted flash device so the file system can be accessed when it needs to be mounted by the firmware. You can use the dspfspass command to view information about the stored passphrases. You can view information for all the passphrases, or for a specified queue manager or system file system. The passphrases themselves are not displayed.
The following information is displayed:
- Passphrase type
- Whether the passphrase is for a queue manager or system file system, and the name of the queue manager or type of system file system.
- Passphrase status
- The status of the passphrase, is one of the following values:
- Normal
- The stored passphrase is either correct or it has not yet been used.
- File system not found
- The file system for the stored passphrase does not exist, so the stored passphrase is not required. This status might occur if the SSD disks are replaced after a hardware failure.
- File system not encrypted
- The file system for the stored passphrase is not encrypted, so the stored passphrase is not required. This status might occur if the SSD disks are swapped with those from another appliance after a hardware failure.
- Passphrase not valid
- The stored passphrase was not correct when it was last used to access the file system.
- Passphrase last updated
- The date and time that the passphrase was last stored on the appliance. (This might not be when the passphrase was last updated for the file system.)
Syntax
Parameters
- -m QMgrName
- Filters the output so that only information about the stored passphrase for the specified queue manager is displayed.
- -f SystemFilestore
- Filters the output so that only information about the stored passphrase for the specified file
system is displayed. Specify one of the following values:
- root
- The IBM MQ root file system, which is equivalent to /var/mqm on Linux and UNIX platforms (includes user and key repository backups in mqbackup:///)
- backup
- The IBM MQ queue manager back up file system that is created by createbackupfs (mqbackup:///QMgrs)
- diag
- The IBM MQ diagnostics file system (mqdiag:///)
- errors
- The IBM MQ errors file system (mqerr:///)
- trace
- The IBM MQ trace file system (mqtrace:///)
Examples
The following example displays information for all the passphrases stored on the
appliance.
mqa(mqcli)# dspfspass
File system: backup
Passphrase status: Normal
Passphrase last updated: 2020-10-26 11:32:53.038
Queue manager: QM1
Passphrase status: Passphrase not valid
Passphrase last updated: 2020-10-26 11:34:03.742
The following example displays information about the passphrase for the file system of the queue
manager
QM2:
mqa(mqcli)# dspfspass -m QM2
Queue manager: QM2
Passphrase status: Normal
Passphrase last updated: 2022-01-01 11:34:03.742