The iKeyman tool
The key-management program, iKeyman, is provided with IBM® SDK Java™ Technology Edition. It is a user-friendly GUI for managing key files, which is implemented as an applet.
IBM SDK Java Technology Edition, Version 8 SR 0 is
available when you install IBM Security
Directory Server version 6.4. The iKeyman utility
is available on Windows in
the <SDS_Install_Directory>\java\jre\bin directory,
on Linux® in the /opt/ibm/ldap/V6.4/java/jre/bin directory,
and on AIX® and Solaris systems
in the /opt/IBM/ldap/V6.4/java/jre/bin directory.
Note: If
you are prompted to set
JAVA_HOME
, you can set it
to the java subdirectory of the IBM Security Directory Server. If you use IBM Security Directory Server, you
also need to set the LIBPATH
environment variable
as follows: - On Linux platform
-
$export LIBPATH=$JAVA_HOME/bin:$JAVA_HOME/jre/bin:$LIBPATH
- On Windows platform
-
c:\> set LIB=%JAVA_HOME%\bin; %JAVA_HOME%\jre\bin; %LIB%
On AIX systems
use the LIBPATH
environment variable to specify the
library path, and on Solaris systems use the LD_LIBRARY_PATH
environment
variable.
Use iKeyman to create public-private key pairs
and certificate requests, receive certificate requests into a key
database file, and manage keys in a key database file.
Note: When
you set up Secure Sockets Layer communications, ensure that you use
the correct key database file type for your application. For example,
applications that are based on IBM SDK Java Technology Edition such as
the Web Administration console require
JKS
file
types, while C-applications like IBM Security
Directory Server require CMS
key database file types.You can carry out the following tasks with iKeyman:
- Creating a key pair and requesting a certificate from a certificate authority
- Receiving a certificate into a key database file
- Managing keys and certificates
- Changing a key database password
- Showing information about a key
- Deleting a key
- Making a key the default key in the key database
- Creating a key pair and certificate request for self-signing
- Exporting a key
- Importing a key into a key database
- Designating a key as a trusted root
- Removing trusted root key designation
- Requesting a certificate for an existing key
- Migrating a keyring file to the key database format