IBM WebSphere V5.0 Security - CGISecurity

10.10.1 Generating a digital certificate
The use of ikeyman to create a digital certificate has been documented in 10.9,
“Demo keyfile” on page 261. However, the version of ikeyman provided with the
IBM HTTP Server supports the CMS Key Database format (KDB) which is not
supported with the IBM JSSE-based ikeyman tool provided with WebSphere.
The KDB format is required by the IBM HTTP Server and therefore the ikeyman
usage differs slightly to begin with. The differences will be documented in this
section.
Be sure to start the correct version of ikeyman; do not start the ikeyman version
provided by WebSphere. The process for starting ikeyman differs depending on
the type of operating system used.
For UNIX systems, the process is as follows.
1. Issue the following command:
export JAVA_HOME=/usr/jdk_base
2. From the /bin directory, run ./ikeyman
For Windows systems, the process is as follows.
1. From the Start menu, select Programs -> IBM HTTP Server 1.3.26 -> Start
Key Management Utility.
Note: This is a different version of the ikeyman utility. It works with different
types of key stores.
You can see the difference between the two applications; the IBM HTTP
Server ikeyman does not have the small human-shaped icon.
Chapter 10. Administering WebSphere security 279