Managing profiles

When you initialize the TKE workstation crypto adapter, a set of IBM®-supplied profiles are loaded on the adapter. You can use the CCA Node Management Utility's Profile Management window to modify the IBM-supplied profiles on the adapter, or to define and load your own profiles on the adapter.

Each of the IBM-supplied profiles is created from a corresponding IBM-supplied profile definition file that is stored on the TKE workstation's hard drive. You can also define your own profile definition files. The profile definition files you create can be stored on the TKE workstation's hard drive or on removable media. A profile definition file describes the attributes of a profile, and are important for migration between versions of TKE and for recovery. We recommend that you:

Create profile definition files for any new profiles you create. This will help during migration to a new TKE workstation or for recovery of the TKE workstation crypto adapter data. If you later modify the profile loaded on the TKE workstation crypto adapter, you should also modify the corresponding profile definition file.
When creating profile definition files, we further recommend:
- using the naming convention profile-name.pro.
- using the IBM-supplied roles (such as TKEUSER, SCTKEADM) whenever possible.
Do not edit the IBM-supplied profile definition files. By leaving the IBM-supplied profile definition files unedited, you preserve the ability to restore IBM-supplied profiles to their default settings, including the default passwords. If you edit the IBM-supplied profiles, we recommend you save the modified settings to a new profile definition file instead of editing the original profile definition file supplied by IBM.

To open the CCA Node Management Utility's Profile Management window:

Go to the CCA Node Management Utility main window.
From the Access Control pull-down menu, select Profiles.
The CCA Node Management Utility's Profile Management window is displayed. Initially, this window lists the profiles currently loaded on the TKE workstation crypto adapter.

Figure 1. Profile Management window listing the profiles on the TKE's local crypto adapter

You can use the Profile Management window to manage the profiles on the TKE workstation crypto adapter and to manage any associated profile definition files. You can use:

the New push button to create a new smart card, passphrase, or group profile.
the Edit push button to edit a profile on the TKE workstation crypto adapter.
the Delete push button to delete a profile by highlighting it and pressing the Delete button. To do this, you first select the profile in the window and then click the Delete button.
the Refresh push button refresh the list in the window.
the Open push button to open a profile definition file.
the Done push button to close the window.

Clicking the New, Edit, or Open push buttons will all eventually open a window for modifying profile settings. The window will differ slightly depending on the type of profile – either a passphrase profile, a smart card profile, or a group profile. From this window, you will be able to load the settings as a profile on the TKE workstation crypto adapter (provided a profile of the same name is not already loaded on the adapter), or save the settings as a profile definition file on the TKE workstation's hard drive or on removable media.

To replace a profile that is already loaded on the TKE workstation crypto adapter, you will always want to use the Edit push button. Only by clicking the Edit push button will you be able to replace an already-loaded profile.