Generating usage key triplets

To generate the usage key triplets, run the following command from the console:

keygen triplet <masterkeyfilepath> <tripletkeypath>

• masterkeyfilepath is the file location of your master key. This location must include the file name of the master key.
• tripletkeypath is the location on your portable memory device where you want to store the usage key triplets. The usage key triplets are later physically distributed to the IBM® Safer Payments instances. When the first key ID is specified, keys are not generated in tripletkeypath.

The key generator guides you through the process of generating a usage key triplet. You need two master key holders and two usage key holders for this process.

The keygen program generates the file tripletkeypath/key_<usage_key_id>.iris.

You can repeat this process at any time to generate the number of usage key triplets that you need. The master key holder passphrases do not have to be entered for each usage key triplet generation, unless you quit the key generator.

If you generated all the usage key triplets you need, shut down the PC and store the portable memory device at a safe place until you need to generate more usage keys.