IBM WebSphere V5.0 Security - CGISecurity

10.10.1 Generating a digital certificateThe use of ikeyman to create a digital certificate has been documented in 10.9,“Demo keyfile” on page 261. However, the version of ikeyman provided with theIBM HTTP Server supports the CMS Key Database format (KDB) which is notsupported with the IBM JSSE-based ikeyman tool provided with WebSphere.The KDB format is required by the IBM HTTP Server and therefore the ikeymanusage differs slightly to begin with. The differences will be documented in thissection.Be sure to start the correct version of ikeyman; do not start the ikeyman versionprovided by WebSphere. The process for starting ikeyman differs depending onthe type of operating system used.For UNIX systems, the process is as follows.1. Issue the following command:export JAVA_HOME=/usr/jdk_base2. From the /bin directory, run ./ikeymanFor Windows systems, the process is as follows.1. From the Start menu, select Programs -> IBM HTTP Server 1.3.26 -> StartKey Management Utility.Note: This is a different version of the ikeyman utility. It works with differenttypes of key stores.You can see the difference between the two applications; the IBM HTTPServer ikeyman does not have the small human-shaped icon.Chapter 10. Administering WebSphere security 279