
Chapter 9. Tape data encryption 119
Modify the EKM client configuration file
Example 9-13 shows the modified CliKeyManagerConfig.properties file. We copied the
sample file to the /usr/ekm directory and modified it as shown. This connects now to the
keystore, and is used to start up the client session. All EKM commands are then issued in the
client session.
Example 9-13 Customized CliKeyManagerConfig.properties
TransportListener.ssl.truststore.name=/usr/ekm/AJkeys.jcks
debug.output.file=debug
TransportListener.ssl.ciphersuites=JSSE_ALL
TransportListener.ssl.host=localhost
TransportListener.ssl.keystore.type=jceks
TransportListener.ssl.keystore.pas