RE: Problem with EKM

It sounds like kspwd might be just the sample password. Can you get into
the keystore using that password with the Digital Certificate Manager?
Also, this isn't really a "java on the 400" question other than EKM is
written in Java. Perhaps you want to move this to the regular AS/400 list
or take it off the list?

Gary

-----Original Message-----
From: java400-l-bounces@xxxxxxxxxxxx [mailto:java400-l-
bounces@xxxxxxxxxxxx] On Behalf Of Tony_Goodall@xxxxxxxxxx
Sent: Wednesday, October 14, 2009 7:43 AM
To: Java Programming on and around the iSeries / AS400
Cc: 'Java Programming on and around the iSeries / AS400'; java400-l-
bounces@xxxxxxxxxxxx
Subject: RE: Problem with EKM

What should the password entries be set to? Is this in the
KeyManagerConfig.properties file? If so they are all set to kspwd

Tony Goodall
iSeries Analyst
TD Waterhouse
Exten 36273
Mobex 56273
Mobile 07736 118474
Desk Number 0161 819 6273



"Gary L Peskin" <garyp@xxxxxxxxxxxx>
Sent by: java400-l-bounces@xxxxxxxxxxxx
14/10/2009 15:39
Please respond to
Java Programming on and around the iSeries / AS400

<java400-l@xxxxxxxxxxxx>

To
"'Java Programming on and around the iSeries / AS400'"
<java400-l@xxxxxxxxxxxx>
cc

Subject
RE: Problem with EKM






Check all of your password entries (Admin.ssl.keystore.password,
config.keystore.password, TransportListener.ssl.keystore.password) and

make

sure they are correct and have no trailing spaces in the properties file
before the line terminator. Have you specified debug.output.file in your
properties file? If so, does that file show anything of interest?

HTH,
Gary

-----Original Message-----
From: java400-l-bounces@xxxxxxxxxxxx [mailto:java400-l-
bounces@xxxxxxxxxxxx] On Behalf Of Tony_Goodall@xxxxxxxxxx
Sent: Wednesday, October 14, 2009 7:03 AM
To: java400-l@xxxxxxxxxxxx
Subject: Re: Problem with EKM

I keep getting the following error when I try to Start the EKM

Resource management event:^
timestamp=Tue Oct 13 16:51:02 GMT 2009
ComponentId=^threadId=Thread^main,10,main]]
event source=com.ibm.keymanager.keygroups.KeyGroupManager
outcome=^result=unsuccessful]
event type=SECURITY_MGMT_RESOURCE
message=Keystore was tampered with, or password was incorrect
action=retrieve
user=^name=KMSAdmin]
resource=^name=/EKM/EKMKeys.jck;type=file]
]

I have checked the proerties file with IBM and all seems correct, can
anyone help?

Tony Goodall
iSeries Analyst
TD Waterhouse
Exten 36273
Mobex 56273
Mobile 07736 118474
Desk Number 0161 819 6273