Differences

This shows you the differences between two versions of the page.

--- certificates [2018/02/13 07:42] – michael
+++ certificates [2021/04/24 07:40] (current) – external edit 127.0.0.1
@@ Line 3: / Line 3: @@
 Ab 7.1.8 und 8.* ssl Verschlüsseldung.
+Vor Upgrade auf Version alte cert.kdbs löschen und neu generieren lassen.
+((( upd admin $admin sessionsecurity=transitional )))
-Server Key auf Client importieren.
+Server Key auf Client importieren. (windows ggf. Commandline ALS ADMIN)
   C:\Program Files\Tivoli\TSM\baclient>dsmcert.exe -add -server idmztsm1 -file IDMZTSM1.cert256.arm
@@ Line 11: / Line 13: @@
    gsk8capicmd_64 -cert -list all -db cert.kdb -stashed
-Add a Certificate to the kert.db
+Server2Server Communication: Add a Certificate to the kert.db
    gsk8capicmd_64 -cert -add -label 141.90.16.7 -db cert.kdb -stashed -file /tsm1/server/cert256.arm
+List default Key from Keystore
+   tsm2:/ispt2/server # gsk8capicmd_64 -cert -getdefault -db cert.kdb -stashed
+   Label : TSM Server SelfSigned SHA Key
+   Key Size : 2048
+   Version : X509 V3
+   Serial : 05ccd2b3464abe23
+   Issuer : "CN=TSM Self-Signed Certificate,OU=TSM Network,O=TSM,C=US"
+   Subject : "CN=TSM Self-Signed Certificate,OU=TSM Network,O=TSM,C=US"
+   Not Before : July 4, 2018 1:38:16 PM GMT+02:00
+   Not After : July 2, 2028 1:38:16 PM GMT+02:00
+   Fingerprint :7140a6a4e3539dddddddddddddddddddddddddddddd
+====== problems with database? ======
+you need to remove the complete cert.db an add all certificates again
+  Stop any IBM Spectrum Protect administrator and backup-archive clients that are running on the affected system.
+  From the client installation directory (default=C:\Program Files\Tivoli\TSM\baclient), remove the following
+  files:
+  dsmcert.crl
+  dsmcert.idx
+  dsmcert.kdb
+  dsmcert.rdb
+  dsmcert.sth
+  rm dsmcert.crl dsmcert.idx dsmcert.kdb dsmcert.rdb dsmcert.sth