Command line configuration overview

Edit online

You can use amwebcfg to configure a Reverse Proxy instance from a command line. All necessary settings are supplied as command line options. The utility completes the configuration without further prompting of the administrator.

The amwebcfg syntax is as follows (entered as one line):

amwebcfg -action config  –host host_name -listening_port am_listener_port 
-admin_id admin_id -admin_pwd admin_pwd -inst_name instance_name 
 -nw_interface_yn network_interface -ip_address ip_address -domain am_domain
 -ssl_yn ssl_enable_yes_no -key_file key_file -key_file_pwd key_file_pwd 
 -cert_label cert_label -ssl_port ssl_port -http_yn allow_http_yn 
 -http_port http_port -https_yn allow_https_yn -https_port https_port 
 -doc_root doc_root

The options to amwebcfg are as shown in the following table:

Option Description
-admin_id Administrative user ID
-admin_pwd Administrative user password
-host Host name
-inst_name Instance name
-listening_port Listening port
-http_yn Enable HTTP usage
-http_port HTTP port
-https_yn Enable HTTPS usage
-https_port HTTPS port
–nw_interface_yn Use logical network interface
-ip_address IP address
-domain Verify Identity Access management domain
-ssl_yn Use SSL to communicate with LDAP server
-key_file SSL key file
-key_file_pwd SSL key file password
-cert_label SSL certificate label
-ssl_port SSL port
-doc_root Web document root directory

For example, using the example settings listed in Example Reverse Proxy instance configuration values, the command line would be as follows (entered as one line):

amwebcfg –action config –inst_name default –host diamond.subnet2.ibm.com 
 –listening_port 7234  –admin_id sec_master –admin_pwd mypassw0rd -inst_name web1 
 -nw_interface_yn yes -ip_address 1.2.3.5 -domain domainA –ssl_yn yes 
 –key_file /tmp/client.kdb  –key_file_pwd mypassw0rd –cert_label ibm_cert 
 –ssl_port 636 –http_yn yes –http_port 81 –https_yn yes –https_port 444 
 –doc_root /usr/docs

If any configuration option or argument is missing from the command line, the amwebcfg utility prints an error message and stops. The exceptions to this rule are as follows:

  • Verify Identity Access management domain

    When this value is not supplied, the default Verify Identity Access domain is used.

  • SSL certificate label

    When this value is not supplied, no value is set and the default certificate is used.

  • Web document root directory

    A unique directory is created for the instance. The algorithm for creating the directory is described in Reverse Proxy instance configuration planning.

For more information see the amwebcfg reference page in the IBM Verify Identity Access for Web: Command Reference.