Netscape NETSCAPE MANAGEMENT SYSTEM 6.0 -... User manual

Command-Line Tools Guide
Netscape Certificate Management System
Version6.0
March 2002

Netscape Communications Corporation ("Netscape") and its licensors retain all ownership rights to the software programs offered by
Netscape (referred to herein as "Software") and related documentation. Use of the Software and related documentation is governed by the
license agreement for the Software and applicable copyright law.
Your right to copy this documentation is limited by copyright law. Making unauthorized copies, adaptations or compilation works is
prohibited and constitutes a punishable violation of the law. Netscape may revise this documentation from time to time without notice.
THIS DOCUMENTATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. IN NO EVENT SHALL NETSCAPE BE LIABLE
FOR INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES OF ANY KIND ARISING FROM ANY ERROR IN THIS
DOCUMENTATION, INCLUDING WITHOUT LIMITATION ANY LOSS OR INTERRUPTION OF BUSINESS, PROFITS, USE, OR DATA.
The Software and documentation are copyright © 2001 Sun Microsystems, Inc. Portions copyright 1999, 2002 Netscape Communications
Corporation. All rights reserved.
Netscape and the Netscape N logo are registered trademarks of Netscape Communications Corporation in the United States and other
countries. Other Netscape logos, product names, and service names are also trademarks of Netscape Communications Corporation, which
may be registered in some countries. Other product and brand names are the exclusive property of their respective owners.
The downloading, exporting, or reexporting of Netscape software or any underlying information or technology must be in full compliance
with all United States and other applicable laws and regulations. Any provision of Netscape software or documentation to the U.S.
government is with restricted rights as described in the license agreement for that Software.

3
Contents
AboutThisGuide............................................................... 9
WhatYouShouldAlreadyKnow ..........................................................9
What’sinThisGuide....................................................................10
ConventionsUsedinThisGuide .........................................................11
WheretoGoforRelatedInformation......................................................13
Chapter 1 Command-LineTools................................................ 15
Chapter 2 Password Cache Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Location...............................................................................19
Syntax ................................................................................20
Usage.................................................................................20
ListingtheContentsofthePasswordCache .............................................21
Adding a New Entry to the Password Cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
ChangingthePasswordofanEntryinthePasswordCache ...............................22
DeletinganEntryFromthePasswordCache ............................................23
Chapter 3 KillProcessTool ................................................... 25
Location...............................................................................25
Syntax ................................................................................25
Usage.................................................................................26
Chapter 4 PIN Generator Tool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
LocatingthePINGeneratorTool .........................................................27
ThesetpinCommand ...................................................................28
Command-LineSyntax ...............................................................28

4 Netscape Certificate Management System Command-Line Tools Guide • March 2002
Arguments....................................................................... 28
Example ......................................................................... 31
HowtheToolWorks ................................................................... 32
InputFile........................................................................... 34
OutputFile ......................................................................... 36
HowPINsAreStoredintheDirectory ................................................. 37
ExitCodes.......................................................................... 37
Chapter 5 Extension Joiner Tool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
Location .............................................................................. 40
Syntax ................................................................................ 40
Usage................................................................................. 40
Chapter 6 BackingUpandRestoringData ....................................... 43
BackupandRestoreTools ............................................................... 43
BackingUpData ....................................................................... 44
WhattheBackupToolDoes........................................................... 44
WhattheBackupToolDoesNotDo.................................................... 47
RunningtheBackupTool............................................................. 47
AfterYouFinishaBackup ............................................................ 48
RestoringData......................................................................... 49
BeforeYouRestoreData.............................................................. 49
RunningtheRestoreTool............................................................. 51
Chapter 7 ASCIItoBinaryTool................................................. 55
Location .............................................................................. 55
Syntax ................................................................................ 55
Example .............................................................................. 56
Chapter 8 BinarytoASCIITool................................................. 57
Location .............................................................................. 57
Syntax ................................................................................ 57
Example .............................................................................. 58
Chapter 9 PrettyPrintCertificateTool........................................... 59
Location .............................................................................. 59
Syntax ................................................................................ 59
Example .............................................................................. 60
Chapter 10 PrettyPrintCRLTool............................................... 63
Location .............................................................................. 63

5
Syntax ................................................................................63
Example...............................................................................64
Chapter 11 Certificate Database Tool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
Location...............................................................................67
Syntax ................................................................................68
OptionsandArguments ..............................................................68
Usage.................................................................................72
Examples..............................................................................73
CreatingaNewCertificateDatabase ...................................................73
ListingCertificatesinaDatabase.......................................................74
CreatingaCertificateRequest .........................................................74
CreatingaCertificate.................................................................75
Adding a Certificate to the Database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
ValidatingaCertificate ...............................................................76
Chapter 12 KeyDatabaseTool ................................................. 79
Location...............................................................................79
Syntax ................................................................................80
OptionsandArguments ..............................................................80
Usage.................................................................................82
Examples..............................................................................83
CreatingaKeyDatabase..............................................................83
GeneratingaNewKey ...............................................................84
DisplayingPublicKeyInformation.....................................................85
ListingKeyIDs ......................................................................85
DeletingaPrivateKey................................................................86
Chapter 13 Netscape Signing Tool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
IntroductiontoNetscapeSigningTool ....................................................87
WhatIsNetscapeSigningTool? .......................................................88
JARFormatandJARArchives.........................................................89
WhatSigningaFileMeans ............................................................90
Object-SigningCertificates ............................................................90
UsingNetscapeSigningTool.............................................................91
GettingReadytoUseNetscapeSigningTool ............................................92
SettingUpYourCertificate .........................................................92
ListingAvailableCertificates .......................................................93
SigningaFile........................................................................94
UsingNetscapeSigningToolwithaZIPUtility ..........................................95
TipsandTechniques .................................................................95
SignToolSyntaxandOptions ............................................................97

6 Netscape Certificate Management System Command-Line Tools Guide • March 2002
CommandSyntax ................................................................... 97
CommandOptions .................................................................. 97
CommandFileSyntax............................................................... 102
CommandFileKeywordsandExample ............................................... 102
GeneratingTestObject-SigningCertificates............................................... 104
GeneratingtheKeysandCertificate................................................... 104
UsingNetscapeSigningToolwithSmartCards ........................................... 106
WhatIsaSmartCard? .............................................................. 106
SettingUpaSmartCard............................................................. 106
Usingthe-MOptiontoListSmartCards .............................................. 108
UsingNetscapeSigningToolandaSmartCardtoSignFiles ............................. 108
NetscapeSigningToolandFIPS-140-1 ................................................... 109
UsingFIPS-140Mode ............................................................... 109
VerifyingFIPSMode................................................................ 110
AnswerstoCommonQuestions......................................................... 111
Chapter 14 SSL Debugging Tool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
Location ............................................................................. 115
Description........................................................................... 115
Syntax ............................................................................... 116
Options ........................................................................... 116
Examples ............................................................................ 117
Example1 ......................................................................... 118
Command ...................................................................... 118
Output ......................................................................... 118
Example2 ......................................................................... 122
Command ...................................................................... 122
Output ......................................................................... 122
Example3 ......................................................................... 125
Command ...................................................................... 125
Output ......................................................................... 125
Example4 ......................................................................... 126
Command ...................................................................... 126
Output ......................................................................... 126
UsageTips ........................................................................... 127
Chapter 15 SSLStrengthTool ................................................ 129
Location ............................................................................. 129
Syntax ............................................................................... 129
OptionsandArguments............................................................. 130
Usage................................................................................ 130
RestrictingCiphers ................................................................. 131

7
ExportPolicyandStep-up ...........................................................131
Examples.............................................................................132
Example1 .........................................................................132
Example2 .........................................................................133
Example3 .........................................................................133
Chapter 16 Security Module Database Tool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135
Location..............................................................................135
Syntax ...............................................................................136
OptionsandArguments .............................................................136
Usage................................................................................139
JARInstallationFile....................................................................140
SampleScript ......................................................................140
ScriptGrammar ....................................................................141
Keys .................................................................................142
GlobalKeys ........................................................................142
Per-PlatformKeys ..................................................................144
Per-FileKeys .......................................................................145
Examples.............................................................................146
CreatingDatabaseFiles..............................................................147
DisplayingModuleInformation ......................................................147
SettingaDefaultProvider............................................................148
EnablingaSlot .....................................................................149
EnablingFIPSCompliance ...........................................................149
Adding a Cryptographic Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150
Installing a Cryptographic Module from a JAR File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150
ChangingthePasswordonaToken ...................................................152
Index ....................................................................... 153

8 Netscape Certificate Management System Command-Line Tools Guide • March 2002

9
About This Guide
The Command-Line Tools Guide describes various command-line tools or utilities
that are bundled with Netscape Certificate Management System (CMS). It provides
the information such as the command syntax, platform support, examples, and so
on, required to use these tools.
This preface has the following sections:
• What You Should Already Know (page 9)
• What’s in This Guide (page 10)
• Conventions Used in This Guide (page 11)
• Where to Go for Related Information (page 13)
What You Should Already Know
This guide is intended for experienced system administrators who are planning to
deploy Certificate Management System. CMS agents should refer to CMS Agent’s
Guide for information on how to perform agent tasks, such as handling certificate
requests and revoking certificates.
This guide assumes that you
• Are familiar with the basic concepts of public-key cryptography and the Secure
Sockets Layer (SSL) protocol.
❍SSL cipher suites
❍The purpose of and major steps in the SSL handshake

What’s in This Guide
10 Netscape Certificate Management System Command-Line Tools Guide • March 2002
• Understand the concepts of intranet, extranet, and the Internet security and the
role of digital certificates in a secure enterprise. These include the following
topics:
❍Encryption and decryption
❍Public keys, private keys, and symmetric keys
❍Significance of key lengths
❍Digital signatures
❍Digital certificates, including various types of digital certificates
❍The role of digital certificates in a public-key infrastructure (PKI)
❍Certificate hierarchies
If you are new to these concepts, we recommend that you read the
security-related appendixes of the accompanying manual, Managing Servers
with Netscape Console.
• Are familiar with the role of Netscape Console in managing Netscape version
6.x servers. Otherwise, see the accompanying manual, Managing Servers with
Netscape Console.
• Are reading this guide in conjunction with the documentation listed in “Where
to Go for Related Information” on page 13.
What’s in This Guide
This guide covers the following topics:
• Chapter 1, “Command-Line Tools” Provides an overview of the command-line
tools provided with Certificate Management System, including the ones that
are not covered in this documentation.
• Chapter 2, “Password Cache Utility” Describes how to use the tool for
managing the single sign-on password cache.
• Chapter 3, “Kill Process Tool” Describes how to use the tool for terminating
CMS process if the server fails to respond to a start, restart, or stop commands.
• Chapter 4, “PIN Generator Tool” Describes how to use the tool for generating
unique PINs for your users and for populating their directory entries with
PINs.

Conventions Used in This Guide
About This Guide 11
• Chapter 5, “Extension Joiner Tool” Describes how to use the tool for joining
MIME-64 encoded formats of certificate extensions to create a single blob.
• Chapter 7, “ASCII to Binary Tool” Describes how to use the tool for converting
ASCII data to its binary equivalent.
• Chapter 8, “Binary to ASCII Tool” Describes how to use the tool for converting
binary data to its ASCII equivalent.
• Chapter 9, “Pretty Print Certificate Tool” Describes how to use the tool for
printing or viewing the contents of a certificate stored as ASCII base-64 encoded data in
a human-readable form.
• Chapter 10, “Pretty Print CRL Tool” Describes how to use the tool for printing
or viewing the contents of a CRL stored as ASCII base-64 encoded data in a
human-readable form.
• Chapter 11, “Certificate Database Tool” Describes how to use the tool for
manipulating the certificate database.
• Chapter 12, “Key Database Tool” Describes how to use the tool for
manipulating the key database.
• Chapter 13, “Netscape Signing Tool” Describes how to use the tool to associate
a digital signature with any file, including CMS log files.
• Chapter 14, “SSL Debugging Tool” Describes how to use the tool for testing
and debugging purposes.
• Chapter 15, “SSL Strength Tool” Describes how to use the tool for testing and
debugging purposes.
• Chapter 16, “Security Module Database Tool” Describes the Password Cache
Utility and explains how to use it for managing the single sign-on password
cache.
Conventions Used in This Guide
This guide uses the following conventions:
The following conventions are used in this guide:
•Monospaced font—Thistypefaceisusedforanytextthatappearsonthe
computer screen or text that you should type. It’s also used for filenames,
functions, and examples.
Example: Server Root is the directory where the CMS binaries are kept.

Conventions Used in This Guide
12 Netscape Certificate Management System Command-Line Tools Guide • March 2002
•Italic—Italic type is used for emphasis, book titles, and glossary terms.
Example: This control depends on the access permissions the superadministrator
has set up for you.
• Text within “quotation marks”—Indicates cross-references to other topics
within this guide.
Example: For more information, see “Issuing a Certificate to a New User” on
page 154.
•[]—Square brackets enclose commands that are optional.
Example: PrettyPrintCert <input_file> [<output_file>]
<input_file> specifies the path to the file that contains the base-64
encoded certificate.
<output_file> specifies the path to the file to write the certificate. This
argument is optional; if you don’t specify an output file, the certificate
information is written to the standard output.
•<>—Angle brackets enclose variables or placeholders. When following
examples, replace the angle brackets and their text with text that applies to
your situation. For example, when path names appear in angle brackets,
substitute the path names used on your computer.
Example: Using Netscape Communicator 4.7x or later, enter the URL for the
Administration Server: http://<hostname>:<port_number>
•/—A forward slash is used to separate directories in a path. If you use the
Windows NT operating system, you should replace / with \ in paths.
Example: Except for the Security Module Database Tool, you can find all the
other command-line utilities at this location: <server_root>/bin/cert/tools
• Sidebar text—Sidebar text marks important information. Make sure you read
the information before continuing with a task.
Examples:
NOTE You can use Netscape Console only when Administration Server is
up and running.
CAUTION A caution note documents a potential risk of losing data, damaging
software or hardware, or otherwise disrupting system performance.

Where to Go for Related Information
About This Guide 13
Where to Go for Related Information
This section summarizes the documentation that ships with Certificate
Management System, using these conventions:
•<server_root> is the directory where the CMS binaries are kept (specified
during installation).
•<instance_id> is the ID for this instance of Certificate Management System
(specified during installation).
The documentation set for Certificate Management System includes the following:
•Managing Servers with Netscape Console
Provides background information on basic cryptography concepts and the role
of Netscape Console. For the HTML version, open this file:
<server_root>/manual/en/admin/ag/contents.htm
•CMS Installation and Setup Guide
Describes how to plan for, install, and administer Certificate Management
System. To access the installation and configuration information from within
the CMS Installation Wizard or from the CMS window (within Netscape
Console), click any help button. To view the HTML version of this guide, open
this file: <server_root>/manual/en/cert/setup_guide/contents.htm
•CMS Plug-Ins Guide
Provides detailed reference information on CMS plug-ins. To access this
information from the CMS window within Netscape Console, click any help
button. To view the HTML version of this guide, open this file:
<server_root>/manual/en/cert/plugin_guide/contents.htm
•CMS Command-Line Tools Guide (this guide)
Provides detailed reference information on CMS tools. To view the HTML
version of this guide, open this file:
<server_root>/manual/en/cert/tools_guide/contents.htm
•CMS Customization Guide
Provides detailed reference information on customizing the HTML-based
agent and end-entity interfaces. To view the HTML version of this guide, open
this file: <server_root>/manual/en/cert/custom_guide/contents.htm

WheretoGoforRelatedInformation
14 Netscape Certificate Management System Command-Line Tools Guide • March 2002
•CMSAgent’sGuide
Provides detailed reference information on CMS agent interfaces. To access
this information from the Agent Services pages, click any help button. To view
the HTML version of this guide, open this file:
<server_root>/cert-<instance_id>/web-apps/agent/manual/agent_gui
de/contents.htm
•End-EntityHelp
Provides detailed reference information on CMS end-entity interfaces. To
access this information from the end-entity pages, click any help button. To
view the HTML version of this guide, open this file:
<server_root>/cert-<instance_id>/web-apps/ee/manual/ee_guide/con
tents.htm
For a complete list of CMS documentation, open the
<server_root>/manual/index.html file. For the latest information about
Certificate Management System, check the CMS Release Notes and other
documents available at this site:
http://enterprise.netscape.com/docs/cms/index.html

15
Chapter 1
Command-Line Tools
Netscape Certificate Management System (CMS) is bundled with various
command-line utilities. This chapter summarizes these utilities and provides
pointers to chapters that further explain them.
Table 1-1 summarizes the command-line utilities that are bundled with Certificate
Management System.
Table 1-1 Summary of command-line utilities
Utility/Tool Function
Batch/Shell Scripts located under <server_root>/bin/cert/tools/ (require jre):
PasswordCache
(Password Cache Utility) Manipulates the contents of the single sign-on password cache. For details, see Chapter 2, “Password Cache Utility.”
AtoB
(ASCII to Binary Tool) Converts ASCII base-64 encoded data to binary base-64 encoded data. For details, see Chapter 7, “ASCII to Binary Tool.”
BtoA
(Binary to ASCII Tool) Converts binary base-64 encoded data to ASCII base-64 encoded data. For details, see Chapter 8, “Binary to ASCII Tool.”
PrettyPrintCert
(Pretty Print Certificate
Tool)
PrintsthecontentsofacertificatestoredasASCIIbase-64encoded
data in a human-readable form. For details, see Chapter 9, “Pretty
Print Certificate Tool.”
PrettyPrintCrl
(Pretty Print CRL Tool) Prints the contents of a CRL stored as ASCII base-64 encoded data in a human-readable form. For details, see Chapter 10, “Pretty
Print CRL Tool.”
Executable tools located under <server_root>/bin/cert/tools:
certutil
(Certificate Database Tool) View and manipulate the certificate database (cert7.db) contents. For details, see Chapter 11, “Certificate Database Tool.”
keyutil
(Key Database Tool) View and manipulate the key database (key3.db)contents.For details, see Chapter 12, “Key Database Tool.”

16 Netscape Certificate Management System Command-Line Tools Guide • March 2002
killproc
(Kill Process Tool)
Kills or terminates system processes in Windows NT. For details,
see Chapter 3, “Kill Process Tool.”
setpin
(PIN Generator tool) Generates PINs for end users for directory- and PIN-based authentication. For details, see Chapter 4, “PIN Generator Tool.”
signtool
(Netscape Signing Tool) Digitally signs any file, including log files. For details, see Chapter 13, “Netscape Signing Tool.”
sslstrength
(SSL Strength Tool) Connects to an SSL server and reports back the type and strength of the encryption cipher that it’s using. For details, see Chapter 15,
“SSL Strength Tool.”
ssltap
(SSL Debugging Tool) Used to debug SSL applications. For details, see Chapter 14, “SSL Debugging Tool.”
Perl Scripts located under <server_root>/bin/cert/tools (require _perl):
cmsbackup Copies all of the pertinent data and configuration files for a CMS
instance, the local Administration Server, and local Netscape
Directory Servers that the instance uses into a compressed archive.
For details, see Chapter 6, “Backing Up and Restoring Data.”
cmsrestore Opens a named archive, extracts the data, and uses it to restore the
configuration of a CMS instance. For details, see Chapter 6,
“Backing Up and Restoring Data.”
Executable tools located under <server_root>/shared/bin:
modutil
(Security Module Database
Tool)
Used for managing the PKCS #11 module information within
secmod.db files or within hardware tokens. For details, see
Chapter 16, “Security Module Database Tool.”
Third-party executable tools located under <server_root>/bin/cert/tools:
dumpasn1 Dumps the contents of binary base-64-encoded data. Note that the
tool is freeware that is packaged with Certificate Management
System for your convenience. For more information about this
tool, check this site: http://www.cs.auckland.ac.nz/~pgut001/
Third-party support tools located under <server_root>:
bin/base/jre/bin/jre
bin/cert/jre/bin/jre
Java runtime executable for Netscape Console.
Java runtime executable for Certificate Management System.
Note that the CMS jre is invoked as cms_daemon during CMS
installation and configuration, as cms_watchdog to monitor the
status of the CMS server, and as cms_server to actually run the
CMS server.
Table 1-1 Summary of command-line utilities (Continued)
Utility/Tool Function

Chapter 1 Command-Line Tools 17
The AtoB,BtoA,PrettyPrintCert,PrettyPrintCrl,anddumpasn1 tools are
useful for converting back and forth between various encodings and formats you
may encounter when dealing with keys and certificates.
The Password Cache Utility can be used to manipulate the contents of an existing
single sign-on password cache and to create a new cache.
The Certificate Database Tool, Key Database Tool, and Security Module Database
Tool are useful for a variety of administrative tasks that involve manipulating
certificate and key databases.
The PIN Generator tool is used to create PINs for directory authentication. The
killproc tool is used to terminate the Java virtual machines, called jre processes,
when Certificate Management System becomes unresponsive.
The Netscape Signing Tool can be used to associate a digital signature with any file,
including CMS log files.
The SSL Strength Tool and SSL Debugging Tool are useful for testing and
debugging purposes.
bin/cert/tools/unzip Decompression utility executable.
bin/cert/tools/zip Compression utility executable.
install/perl perl scripting language executable.
NOTE If you find any problems in Certificate Database Tool (certutil),
Key Database Tool (keyutil),NetscapeSigningTool(signtool),
SSL Debugging Tool (ssltap), and SSL Strength Tool
(sslstrength), you may obtain the source code and build
instructions for the very latest version of these tools (and/or
potentially a binary image for the newer tool) at the following URL:
http://www.mozilla.org/projects/security/pki/nss/tools/
index.html
Note that all Key Database Tool functions have now been
incorporated into the single tool, Certificate Database Tool, and that
several of the command-line options for many of the tools may
have changed. Be sure to check back often to obtain the very latest
version of the desired security tool, as this site will be updated
often.
Table 1-1 Summary of command-line utilities (Continued)
Utility/Tool Function

18 Netscape Certificate Management System Command-Line Tools Guide • March 2002

19
Chapter 2
Password Cache Utility
During the installation of Netscape Certificate Management System (CMS), the
installation daemon stores all the passwords required by the server for starting
up—such as the bind passwords used by Certificate Management System to access
and update the internal LDAP database and the LDAP directory used for
authentication or publishing—in a password cache. The cache is maintained in a
file encrypted using a symmetric key generated by the cryptographic module
wherein the key resides, and encrypted by the single sign-on password (internal
cryptographic module password) you specify during installation.
The command-line utility named PasswordCache enables you to manipulate the
contents of the password cache. You will be required to manipulate the password
cache for various reasons. For example, assume you’ve configured the Certificate
Manager to publish certificates and CRLs to an LDAP directory and have
configured it to bind to the directory with Directory Manager’s DN and password.
If the directory administrator changes the Directory Manager’s password, the
Certificate Manager will fail to bind to the directory during startup. You can
resolve this problem by modifying the corresponding bind password in the cache
using the PasswordCache utility.
This chapter has the following sections:
• Location (page 19)
• Syntax (page 20)
• Usage (page 20)
LocationThe PasswordCache utility is located with the rest of the command-line tools in
this directory: <server_root>/bin/cert/tools

Syntax
20 Netscape Certificate Management System Command-Line Tools Guide • March 2002
Syntax To run the utility, execute the following command from the
<server_root>/cert-<instance_id> directory:
PasswordCache <sso_password> -d <certificate/key db directory>
-P <certificate/key db prefix> <command>
<sso_password> specifies the current single sign-on password.
<certificate/key db directory> specifies the path to the certificate
database (cert7.db) and key database (key3.db) files. The default path is
<server_root>/alias.
<certificate/key db prefix> specifies the prefix for the certificate database
(cert7.db) and key database (key3.db) files. The default prefix is in the
cert-<instance_id>-<hostname>- format.
<command> can be any of the following:
list
add <password_name> <password>
change <password_name> <password>
delete <password_name>
<password_name> specifies the string (describing the password usage) you
want to add to, or modify or delete from the cache; it is equivalent to the
value assigned to the bindPWPrompt or tokenname parameter in the CMS
configuration file. It is essential that the <password_name> coincide with
the names known by Certificate Management System: for example, the
internal cryptographic module is known as internal,theinternalLDAP
bind password is known as Internal LDAP Database,andtheLDAP
publishing bind password for the Certificate Manager is known as CA
LDAP Publishing.
<password> specifies the new password.
Usage You can use the PasswordCache utility for the following:
• Listing or viewing the contents of the password cache
• Adding a new entry to the cache