iTP Secure WebServer System Administrators Guide (Version 7.5+)

This command displays the information about the keyadmin utility that you are running:
• Utility name (keyadmin)
• Version number of the utility
• The operating system platform on which the utility was built
Table 4 (page 68) lists all supported DN attributes.
Table 4 Supported DN Attributes
Required Encoding TypeAttribute
Directory StringCN: Common Name
Directory StringL: Locality
Directory StringST: State
Directory StringO: Organization
Directory StringOU: Organization Unit
Printable StringC: Country
Directory StringSA: Street Address
IA5 StringDC: Domain Component
Directory StringSN: Serial Number
Directory StringT: Title
Directory StringPC: Postal Code
IA5 StringEMAIL: Email Address
Printable StringDQ: DN Qualifier
Directory StringS: Surname
Directory StringGN: Given Name
Directory StringI: Initials
Directory StringGQ: Generation Qualifier
Directory StringNAME: Name
Note: Directory String can take one of these encoding formats, Printable String, or T.61 String (DN value specified is
not in printable character set and UTF-8 encoding is not specified or not applicable for the DN).
Importing a Private Key into iTP Secure WebServer's Key Database File
You can request to import a private key (not generated by the keyadmin utility) to the iTP Secure
WebServer's key database, and then store it in the entry that contains the corresponding certificate.
Starting with iTP Secure WebServer Release 7.5, you can indicate iTP Secure WebServer to process
the private key as unencrypted. The private key must be in one of the following formats:
• PEM or DER encoded PKCS#8 format encrypted using either the 3DES, AES128, AES192, or
AES256 algorithms
• PEM encoded format (keys exported with the older keyadmin utility)
To import a private key, use the keyadmin command:
bin/keyadmin [—verbose] —keydb <keydb> -importpriv <key-file> [-dn 'dn'] [-nocrypt]
NOTE: The bin/ prefix indicates the directory that contains the keyadmin utility; the default
directory is bin.
68 Configuring for Secure Transport