Importing a shared key from one credential store into another allows servers associated with either credential store to encrypt DAOS objects with the shared key.

Before you begin

Complete the procedure Creating a shared key in a credential store.

About this task

The credential store into which you import the shared key can be used by a single server enabled for DAOS or a cluster of servers enabled for DAOS.

Procedure

1. From the console of a Domino server that uses the credential store from which you are importing the shared key, run the following command. If there are multiple shared keys in the credential store, this command exports all of them.

keymgmt export sharedkey <database> <servername>

where

<database> is the file name of a database in which to export the shared keys. The database is created in the local IBM_Credstore directory.

<servername> is the hierarchical name of a server that uses the target credential store into which you will import the shared keys. Only this server can be used to import the shared keys to the target credential store.

For example, to export shared keys to the local database exportdb.nsf that will be imported into target credential store via the server App1/Renovations:

keymgmt export sharedkey exportdb.nsf Apps1/Renovations

3. From the console of server with the target credential store, for example Apps1/Renovations, run the following command to import the shared keys:

keymgmt import credstore <database>

where <database> is the file name of the database with the exported shared keys.

For example:

keymgmt import credstore exportdb.nsf

Complete the procedure Encrypting new attachment objects with a shared key.

Help on Help

All Help Contents

Help on Help