Extract authentication keys

Netezza Performance Server for Cloud Pak for Data System

Note: This feature is not supported if you have Netezza Performance Server 11.2.2.X and later installed on Cloud Pak for Data System 2.X.

You use the nzkey extract command to extract the AEK defined in the keystore and save the plain text key for a specific key label to a file.

Before you begin

You can use the nzkey list command to list the available key labels defined in the keystore. You can extract only one key to a file. If the file exists, the command displays an error.

Procedure

  1. Log in to the container as the root user.
  2. Use the following command to extract the key for a specified label. 
    [root@ipshost nz]# /nz/kit/bin/adm/nzkey extract -label spuaek -file /nz/var/hostkey1.txt
Key written to file

Results

The command creates a file with the extracted AEK. This file can be helpful in cases where you need the current key to reapply a key to SEDs for troubleshooting, or if you want to preserve the key in a third-party key tracking system. As a best practice, make sure that the output file is safe from unauthorized access. Consider deleting the file or moving it to a secure location to protect the key.