encrypt
Function
Outputs a ciphertext character string after you input a plaintext character string.
Syntax
./kmc_tool domainID --encrypt
- You are advised to disable history recording before generating an encrypted password. You can enable this function after the password is generated.
- A private key imported by users must be encrypted. The private key password must be encrypted using kmc_tool for storage. Otherwise, security risks may occur.
Parameter Description
|
Parameter |
Option |
Description |
|---|---|---|
|
domainID |
- |
Domain ID. Domain IDs are divided into different domains to facilitate key management: keypass 0, whitelist 1, keytab_server 2 and keytab_client 3. |
Example
set +o history ./kmc_tool 0 --encrypt set -o history
Figure 1 Generating an encrypted password
Parent topic: Key Management Tool