iTP Secure WebServer System Administrator's Guide (Version 7.0)
Configuring for Secure Transport
iTP Secure WebServer System Administrator’s Guide—523346-012
4-17
Using the Keyadmin Utility to Manage Keys and
Certificates
Changing the Key Database File Password
Use the following keyadmin command to change the password with which the
server’s key database file is encrypted.
You can enter the arguments in any order. Enter the entire command on a single
command line. If a continuation character is necessary, you must use the backslash (\)
character as shown.
bin/keyadmin -keydb keydb -chpw [-verbose]
The command’s arguments have these functions:
-keydb keydb
specifies the name of the key database file in which the key pair you created is
stored.
-chpw
specifies that you want to change the password.
-verbose
specifies that complete information associated with the command string should be
displayed.
The keyadmin utility prompts you for the new password. Database passwords must
have at least eight characters all in uppercase or in a combination of uppercase and
lowercase characters.
Creating a List of Key Database File Contents
To generate a list of keys and certificates along with their attributes, use the following
keyadmin command.
You can enter the arguments in any order. Enter the entire command on a single
command line. If a continuation character is necessary, you must use the backslash (\)
character as shown; the backslash is not permitted to break the DN value across lines.
bin/keyadmin -keydb keydb -list [-dn 'dn'] \
[-root | nonroot] [-disabled | enabled] [-verbose]
Note. The bin/ prefix indicates the directory that contains the keyadmin utility; the default is
the bin directory.
Note. Whenever you use the keyadmin utility to change the key database file password, you
must reset the ServerPassword directive to the same password and restart the server. For
details, see ServerPassword
on page A-77.
Note. The bin/ prefix indicates the directory that contains the keyadmin utility; the default is
the bin directory.