Deployment option

The ctmkeytool script usage with the deployment option is as follows:

<ctmkeytool directory>/ctmkeytool -keystore <p12 keystore file with its full path> -password <keystore password> -passwkey <name of file containing the password encryption key with full path>

This creates and updates the relevant SSL configuration on the computer where Control-M components are installed.

The file that uses the -passwkey parameter is an encryption key, which is used to encrypt the keystore password in the environment’s SSL configuration. Both binary and textual files can be used for this purpose. It is possible to use the tree.bin file in the following locations:

• Control-M/EM: <EM Home Directory>/etc/site/resource/local/tree.bin.
• Control-M/Server: <CTM Home Directory>/data/SSL/cert/tree.bin
• Control-M/Agent: <Agent Home Directory>/data/SSL/cert/tree.bin

After you run the script, you must restart the following relevant components:

• Control-M/EM: Control-M/EM Configuration Agent, CMS, Naming Service, and the relevant gateways
• Control-M/Server: Control-M/Server and Control-M/Server Configuration Agent
• Control-M/Agent: Specific Control-M/Agents