Michael, The manual (GA76-0418 ) informed me on the SDK/JRE install for LINUX (z-series), but not how to start EKM and how to generate keys for s390 (z-series).
I guess "somewhere" in the manual is the documentation. Where is this script you included to start EKM documented? Where is the doc to EXPORT and COPY IBMKeyManagementServer.jar? Ray -----Original Message----- From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of Michael Holzheu Sent: Friday, February 06, 2009 10:06 AM To: LINUX-390@VM.MARIST.EDU Subject: Re: IBM Encryption Key Manager for Java Platform Hi Ray, Am Freitag, den 06.02.2009, 08:59 -0500 schrieb Ray Waters: > Michael, > > I have performed everything for SDK and JRE without problems and all looks > correct. I have two questions: > > I cannot find in the manual how to generate the security keys. Do I use > KEYTOOL to create the JCEKS keystore? In the EKM Users guide it is described how to generate self signed certificates. http://www-01.ibm.com/support/docview.wss?&uid=ssg1S4000504 You can use either keytool or ikeyman. Ikeyman has a GUI and can be started with: export CLASSPATH=IBMKeyManagementServer.jar java -cp IBMKeyManagementServer.jar com.ibm.gsk.ikeyman.Ikeyman Don't forget to enable X11 forwarding (ssh -X). > How do I start EKM? We are using a small shell script to start EKM: #!/bin/sh # # Start Enterprise Key Manager (EKM) # export CLASSPATH=IBMKeyManagementServer.jar pid=$(ps -ef | grep -i com.ibm.keymanager.EKMServer | \ grep -v grep | head -1 | awk '{print $2}') if [ "$pid" != "" ]; then echo "EKM already running with pid $pid" else echo $pid java -cp IBMKeyManagementServer.jar \ com.ibm.keymanager.EKMLaunch KeyManagerConfig.properties fi > The manual (GA76-0418 IBM Encryption Key Manager Component for the Java > Platform - Introduction, PLANNING, AND USERS'S GUIDE) shows all kinds of > examples for WINDOWS, AIX, UNIX, z/OS etc, but not much for LINUX under VM. Right, but somewhere between all the information for z/OS, AIX, etc, you can find the Linux information :-) Michael ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 NOTICE: This e-mail is intended solely for the use of the individual to whom it is addressed and may contain information that is privileged, confidential or otherwise exempt from disclosure. If the reader of this e-mail is not the intended recipient or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please immediately notify us by replying to the original message at the listed email address. Thank You. ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
