Configuration Guides › Policy Server Configuration Guide › Additional WS-Security Configuration Requirements › XML Signing and Validation Service › Use the Smkeytool Utility to Modify the Key Database

Use the Smkeytool Utility to Modify the Key Database

Smkeytool is a command-line utility that lets you populate and manage the smkeydatabase file. The smkeytool utility is installed with the Policy Server.

Smkeytool requires values specified in the smkeydatabase.properties file. Ensure that the file has the proper settings before running smkeytool.

Smkeytool is located in the following directory:

• policy_server_home/bin (UNIX)
• policy_server_home\bin (Windows)

Use smkeytool to:

• Create and delete a key database

  You can only have one key database per Policy Server. After the database is created, you can add keys and certificates.

• Add and delete your private key
• Add and delete a partner certificate
• Import root certificates of CAs
• Add client certificate keys

  If you are using a root or chain Certificate Authority (CA) at the consuming authority that is not listed in the smkeydatabase file, you need to add it.

• List all certificates stored in the key database
• Export key data from smkeydatabase
• Add, list, validate, and delete a Certificate Revocation List

Note: If you are adding a private key or certificate, delete the certificate metadata from the certificate file before trying to import it into the smkeydatabase. Import only the data starting with the --BEGIN CERTIFICATE-- marker and ending with the --END CERTIFICATE-- marker. Be sure to include the markers.