Brocade Network Advisor SAN User Manual v12.0.0 (53-1002696-01, April 2013)

Brocade Network Advisor SAN User Manual 573

53-1002696-01

Steps for connecting to a TKLM appliance

For Windows:

<installed directory>\ibm\tivoli\tiptklmV2\bin\wsadmin.bat -username

TKLMAdmin -password <password> -lang jython

2. Check the certificate list using the following command:

print AdminTask.tklmCertList('[]')

The listing will contain the UUID for all certificates. Use the UUID of the server certificate to

export the server certificate from the database to the file system.

print AdminTask.tklmCertExport('[

-uuid <UUID of the certificate>

-fileName <filename> -format DER]')

3. Exit the wsadmin CLI

After export, the TKLM server certificate is at the following location:

For LINUX:

<installed directory>/ibm/tivoli/tiptklmV2/products/tklm/

For Windows:

<installed directory>\ibm\tivoli\tiptklmV2\products\tklm\

4. Transfer the TKLM certificate that was previously exported into the TKLM server file system to

the Management application host using any binary file transfer mechanism via SCP, USB, or

FTP.

Importing the TKLM certificate into the group leader

The TKLM certificate must be imported from the location on the host to the encryption group leader

node. The encryption group leader exports the certificate to group member switches.

1. Select Configure > Encryption from the menu task bar to display the Encryption Center

dialog box. (Refer to Figure 185 on page 526.)

2. Select a switch from the Encryption Center Devices table, then select Switch > Import

Certificate from the menu task bar.

The Import Signed Certificate dialog box displays (Figure 205).

FIGURE 205 Import Signed Certificate dialog box

3. Browse to the location where the signed certificate is stored, then click OK.

The signed certificate is stored on the switch.