-rec1
Specifies the alias (or key label) of the drive’s certificate.
-rec2
Specifies a second alias (or key label) of the drive’s certificate.
-symrec
Specifies an alias (of the symmetric key) or a key group name for the tape
drive.
Example: moddrive -drivename 000123456789 -rec1 newalias1
refresh
Tells the Encryption Key Manager to refresh the debug, audit, and drive table
values with the latest configuration parameters.
Example: refresh
refreshks
Refreshes the keystore. Use this to reload the keystore specified in
config.keystore.file if it was modified while the Encryption Key Manager server
was running. Use this command only when needed as it may degrade
performance.
Example: refreshks
status
Displays whether key manager server is started or stopped.
Example: status
stopekm
Stops the Encryption Key Manager server.
Example: stopekm
sync
Synchronizes the configuration file properties, or drive table information, or both
on another Encryption Key Manager server with those on the key manager server
issuing the command.
Note: Neither synchronization method acts on the keystore or KeyGroups.xml file.
These must be copied manually.
sync {-all | -config | -drivetab} -ipaddr ip_addr :ssl:port [-merge | -rewrite]
-all
Send both the configuration properties file and the drive table information to
the Encryption Key Manager server specified by -ipaddr.
-config
Send only the configuration properties file to the Encryption Key Manager
server specified by -ipaddr.
Chapter 5. Administering the Encryption Key Manager 5-13
To Next Page
Loading...
Need help?
General