Select the Start Page you want to go to after logging in.

8-10 Oracle Fusion Middleware Administrators Guide for Oracle Virtual Directory

8.3.7 Managing Oracle Directory Services Manager’s Key Store

Oracle Directory Services Manager is integrated with the Credential Store Framework, a secure storage framework provided by Oracle. This section explains how to manage Oracle Directory Services Manager’s credentials and contains the following topics: ■ Understanding Oracle Directory Services Managers Key Store ■ Retrieving Oracle Directory Services Manager’s Java Key Store Password ■ Listing the Contents of odsm.cer Java Key Store ■ Managing Expired Certificates ■ Deleting Trusted Certificates

8.3.7.1 Understanding Oracle Directory Services Managers Key Store

Oracle Directory Services Manager uses a Java Key Store JKS to manage its private key, certificate, and trusted certificates. The first time you use Oracle Directory Services Manager, the program creates a Java Key Store file, named odsm.cer, and assigns a random password to the JKS. This JKS file resides in a directory with a name of the form: DOMAIN_HOME configfmwconfigserversAdminServerapplicationsodsmconf Oracle Directory Services Manager stores this random password in the Credential Store Framework. The WebLogic server administrator can retrieve the Java Key Store password stored in the Credential Store Framework. Oracle Directory Services Manager also generates a self-signed certificate for itself and stores it in the Java Key Store. This self-signed certificate is valid for 15000 days from the date of generation and it should only be used for testing purposes. For production purposes, you must replace this self-signed certificate with a certificate signed by a Certificate Authority CA. Oracle Directory Services Manager does not provide a web-based user interface for managing its keystore. You must manage the keystore by using keytool, a command line tool shipped with the Sun JREJDK.

8.3.7.2 Retrieving Oracle Directory Services Manager’s Java Key Store Password

To manage Oracle Directory Services Managers Java Key Store, you must first retrieve Oracle Directory Services Managers Java Key Store password. The WebLogic administrator can retrieve it using the WebLogic Scripting Tool WLST as follows:

1. Start the WLST shell:

See Also: For more information, refer to the following publications: ■ The Oracle Fusion Middleware Security Guide for more information about the Credential Store Framework. ■ JavaTM Cryptography Architecture API Specification Reference, at http:java.sun.com ■ keytool - Key and Certificate Management Tool, at http:java.sun.com Note: If necessary, type help for more information about available commands.