Changing the Password for a Keystore File

At any time using onkstore the admin may change a keystore file’s password (the master key), which is not the same as the encryption keys used to encrypt storage space data:

onkstore -file my_keystore -pw /tmp/old_password -changepw /tmp/new_password

If your current password is stashed (contained in the keystore’s associated .sth file), then you do not need to pass it to onkstore via the -pw argument, but if you have removed the stash file you must provide the current password to onkstore before it can be changed to a new one.

You can also perform this same function using the “master_key reset” sysadmin command:

dbaccess sysadmin -<<END
execute function task(“master_key reset”,”new_sample_pw”);
END

This method has the advantage of not requiring the current password in order to change to a new one. The current password was provided to the server at boot time.


Copyright© 2019 HCL Technologies Limited