Creating a key database

Use the GSKit iKeyman utility to create a key database file for storing the certificate for the trusted certificate authority of your LDAP server certificates.

1. On your administrative computer, use Windows™ Explorer to navigate to the \IBM\HTTPServer\bin directory and double-click ikeyman.bat.
   The iKeyman utility opens.
2. Click Key Database File > New.
   The New window opens.
3. In the Key database type list, select CMS.
   1. In the File Name field, enter a name for the key database file.
      At runtime, HCL Compass uses one of several methods to find the key database file. See Distributing the key database file for details. If all other methods fail, Compass looks for a key database file named ldapkey.kdb in the default location:

      On Windows:

      install-drive:\HCL_COMMON

      On the UNIX™ system and Linux™:

      /RATIONAL_COMMON

   2. In the Location field, enter the path name for the directory that contains the key database file. Then click OK.
      The Password Prompt window opens.
4. In the Password and Confirm Password fields, enter a password for accessing the key database file.
   1. Select the Stash the password to a file check box.
      Selecting this option stores an encrypted version of the password in a file with a .sth extension. The Ikeyman utility stores the file in the same location as the key database file and uses the same root name as the key database file. For example, if you named the key database file ldapkey.kdb, then the password stash file is named ldapkey.sth.
   2. Click OK.