Importing The Tklm Certificate Into The Group Leader - Brocade Communications Systems Brocade 8/12c User Manual

18
Steps for connecting to a TKLM appliance
2. Check the certificate list using the following command:
3. Exit the wsadmin CLI
4. Transfer the TKLM certificate that was previously exported into the TKLM server file system to

Importing the TKLM certificate into the group leader

The TKLM certificate must be imported from the location on the host to the encryption group leader
node. The encryption group leader exports the certificate to group member switches.
1. Select Configure > Encryption from the menu task bar.
2. Select a switch from the Encryption Center Devices table, then select Switch > Import
FIGURE 174
3. Browse to the location where the signed certificate is stored.
4. Click OK.
472
For Windows:
<installed directory>\ibm\tivoli\tiptklmV2\bin\wsadmin.bat -username
TKLMAdmin -password <password> -lang jython
print AdminTask.tklmCertList('[]')
The listing will contain the uuid for all certificates. Use the uuid of the server certificate to
export the server certificate from the database to the file system.
print AdminTask.tklmCertExport('[
-uuid <UUID of the certificate>
-fileName <filename> -format DER]')
After export, the TKLM server certificate is at the following location:
For LINUX:
<installed directory>/ibm/tivoli/tiptklmV2/products/tklm/
For Windows:
<installed directory>\ibm\tivoli\tiptklmV2\products\tklm\
the Management application host using any binary file transfer mechanism via SCP, USB, or
FTP.
The Encryption Center dialog box displays
Certificate from the menu task bar, or right-click the switch and select Import Certificate.
The Import Signed Certificate dialog box displays
Import Signed Certificate dialog box
The signed certificate is stored on the switch.
(Figure 153).
(Figure 174).
Brocade Network Advisor SAN User Manual
53-1002167-01