Manually generating LTPA keys on Windows without Docker
KB0129272
Applies to
HCL Sametime 12.0.3
Introduction
Lightweight Third Party Authentication (LTPA) uses keys to encrypt and decrypt data. These generated keys must be shared and configured within the Sametime server and must be available before you can configure SSO using LTPA. If you are installing HCL Sametime 12.0.3 on Windows, you must have these keys to enable SSO.
If you are integrating Sametime with a WebSphere based environment, you can export the keys from that existing environment by following the steps for Integrating with HCL Connections. If no WebSphere environment exists, use an instance of Open Liberty to generate the keys.
This article provides instructions to:
- Install OpenLiberty
- Generate the LTPA keys
Instructions
Before you begin
Java must be installed on Windows.
- Launch PowerShell and enter the command:
java -version - Confirm the output shows version 17 or higher.
- Run the following command:
echo $env:JAVA_HOME - Confirm the full path to the JDK is displayed. If the path is missing, add the
JAVA_HOMEpath to the Windows system environment variables.
Note: If you do not have java installed, complete that task before you attempt to implement these instructions. Installing java is outside the scope of this article.
Procedure
-
Navigate to Open Liberty.
-
Scroll to the Downloads section and download the Web Profile 10 package.

-
Create a directory for the installation, for example C:\Liberty. Note: You can use a different directory, C:\Liberty is used throughout the examples in these instructions.
-
Extract the downloaded zip file into C:\Liberty.

-
Launch a Command Prompt (not PowerShell) and navigate to the bin directory:
cd C:\Liberty\wlp\bin -
Run the following command to create the temporary server:
server create tempLTPA
-
Start the server to trigger key generation:
server start tempLTPA
-
Locate the generated ltpa.keys file in the following path:
C:\Liberty\wlp\usr\servers\tempLTPA\resources\security\ltpa.keys
-
Copy the ltpa.keys file to a secure location for use during the Sametime installation.
-
Stop the server:
server stop tempLTPA
-
Delete the C:\Liberty directory to clean up the temporary installation.