iTP Secure WebServer System Administrator's Guide (Version 7.0)

Configuring for Secure Transport
iTP Secure WebServer System Administrator’s Guide—523346-012
4-16
Using the Keyadmin Utility to Manage Keys and
Certificates
Disabling or Enabling a Certificate
To disable a certificate or enable a previously disabled certificate in the key database
file, use the following keyadmin command.
You can enter the arguments in any order. Enter the entire command on a single
command line. If a continuation character is necessary, you must use the backslash (\)
character as shown; the backslash is not permitted to break the DN value across lines.
bin/keyadmin -keydb keydb {-disable | -enable} \
-dn 'dn' [-root] [-verbose]
The command’s arguments have these functions:
-keydb keydb
specifies the name of the key database file in which the key pair you created is
stored.
-disable
specifies that you want to disable a certificate in the key database file. The
certificate remains in the key database file so that it can be enabled, as required, at
a later time.
-enable
specifies that you want to enable a certificate in the key database file.
-dn 'dn'
specifies the full DN for the new key pair. Enclose this DN with apostrophes (') to
protect it from being interpreted by the shell.
Make sure to include the same field values entered on the CA request form and in
the exact order that the CA specifies. Also, enclose any value containing a comma
with quotation marks (").
The keyadmin command accepts these characters in the DN field:
A-Z a-z 0-9 (space) ' ( ) + , - . / : = ? #
-root
treats the certificate as a root.
-verbose
specifies that complete information associated with the command string should be
displayed.
Note. The bin/ prefix indicates the directory that contains the keyadmin utility; the default is
the bin directory.