Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual page 169

2. Open the TKS instance alias/ directory.
cd /var/lib/pki-tks/alias
3. Create a transport key called transport.
tkstool -T -d . -n transport
When prompted, fill in the database password, then type in some noise to seed the random
number generator.
Enter Password or Pin for "NSS Certificate DB":
sh: tput: command not found
A random seed must be generated that will be used in the
creation of your key.
random seed is to use the timing of keystrokes on a keyboard.
To begin, type keys on the keyboard until this progress meter
is full. DO NOT USE THE AUTOREPEAT FUNCTION ON YOUR KEYBOARD!
Continue typing until the progress meter is full:
|************************************************************|
Finished.
Type the word "proceed" and press enter
The next prompts generate a series of session keys. For example:
The next screen generates the first session key share . . .
Type the word "proceed" and press enter to continue (or ^C to break):
sh: tput: command not found
Generating the first session key share . . .
first session key share:
first session key share KCV:
(1) Write down and save the value for this first session key share.
(2) Write down and save the KCV value for this first session key share.
Type the word "proceed" and press enter to continue (or ^C to break):
.... snip ....
Generating first symmetric key . . .
Generating and Transporting Wrapped Master Keys
One of the easiest ways to create a
8979 975D 6867 FB07
5107 08B6 E625 01FD
0420 54F0
proceed
proceed
147