tklmGroupCreate
Use the tklmGroupCreate command to create a group to which you might add keys.
Note: The IBM Security Key Lifecycle Manager command-line
interface commands will be deprecated in the later versions of IBM Security Key Lifecycle Manager. Use
the REST interfaces instead.
Purpose
Use this command to create a group to which you might add keys.Permissions
您的角色必須具有建立動作的許可權，以及具有適當裝置群組的許可權。 若要將金鑰群組設為預設群組，您的角色必須具有修改動作的許可權。
Syntax
tklmGroupCreate -name groupname -type {keygroup} -usage {LTO | DS5000 | BRCD_ENCRYPTOR | ONESECURE | ETERNUS_DX |XIV | GENERIC | userdevicegroup}
Parameters
- -name
- Required. Specify a unique name for the group. The maximum value
is 64 characters. Note: The name of a DS5000 device key group is internally generated.The characters in a name can include alphanumeric characters, and also the period, space, and underscore characters. However, unlike the graphical user interface, the command-line interface allows these special characters in a name:
~!@#$%^*()+|}{:?><`1234567890-=;/, - -type
- Required. Specify the type of objects in the group. The value
is not case-sensitive. You can specify the following values:
- keygroup
- The group contains keys.
- -usage
- Required. Specify a unique device group, such as LTO.
- LTO
- Specifies the LTO device group.
- DS5000
- Specifies the DS5000 device group.
- BRCD_ENCRYPTOR
- 指定 LTO 裝置系列中的 BRCD_ENCRYPTOR 裝置群組。
- ONESECURE
- 指定 DS5000 裝置系列中的 ONESECURE 裝置群組。
- ETERNUS_DX
- 指定 DS5000 裝置系列中的 ETERNUS_DX 裝置群組。
- XIV
- 指定 IBM Spectrum Accelerate（之前稱為 XIV）裝置群組。
- GENERIC
- 指定使用金鑰管理交互作業能力通訊協定來與 IBM Security Key Lifecycle Manager 互動的裝置系列。
GENERIC 裝置群組能夠管理KMIP物件。
請勿使用指令行介面來將裝置新增至 GENERIC 裝置群組或變更 GENERIC 裝置群組屬性。
- userdevicegroup
- 指定基於受支援裝置系列的使用者定義群組。
Examples
This Jython-formatted command creates a group to which you might add keys.
print AdminTask.tklmGroupCreate
('[-name GROUP-myKeyGroup -type keygroup -usage LTO]') This Jython-formatted command creates a group that has a name that includes spaces.
print AdminTask.tklmGroupCreate
('[-name "my Key Group" -type keygroup -usage LTO]')