Use the chkeyserverisklm command to change the system-wide IBM Security Key Lifecycle Manager key server configuration.
Syntax
chkeyserverisklm { [ -devicegroup device_group ] | { [ -sslcert certificate_file ] | [ -nosslcert ] } | [ -enable ] } [ -disable ]
Parameters
- -devicegroupdevice_group
- (Optional) Specifies a specific device group that the system uses with a key server. The value
must be an alphanumeric string no more than 16 characters long.
Note: The specified device name must begin
with a letter (not a number) and cannot contain an underscore.
- -sslcertcertificate_file
- (Optional) Specifies the certificate authority (CA) certificate for the key server. This
parameter cannot be used with -nosslcert. The value must specified in
base64-encoded PEM format.
- -nosslcert
- (Optional) Specifies that the CA certificate on the key server is deleted. This parameter cannot
be used with -sslcert.
- -enable
- (Optional) Enables the specified key server type.
- -disable
- (Optional) Disables the specified key server type.
Important: Do not specify
-disable with other parameters.
Description
This command changes the system-wide IBM Security Key
Lifecycle Manager key server configuration.
An invocation example
chkeyserverisklm -devicegroup JVAR_IBRA -sslcert /dumps/CA_certificate.pem -enable
The resulting output:
No feedback
An invocation example
chkeyserverisklm -nosslcert
The resulting output:
No feedback