Chapter 4 Administering the Sun Crypto Accelerator 4000 Board With the vcaadm andvcadiag Utilities 71
When creatinga security officer, the name is an optional parameter on the command
line. If the security officer name is omitted, vcaadm will prompt you for the name.
(See “Naming Requirements” on page69.)
Populating a Keystore With Users
These user names are known only within the domain of the Sun Crypto Accelerator
4000 board and do not need to be identical to the UNIX user name that the web
server process actually runs as.
When creating a user,the user name is an optional parameter on the command line.
If the user name is omitted, vcaadm will prompt you for the user name. (See
“Naming Requirements” on page 69.)
Users must use this password when authenticating during a web server startup.
Caution – User’s must remember their password. Without the password, the users
cannot access their keys. There is no way to retrieve a lost password.
vcaadm{vcaN@hostname,sec_officer}> create so Alice
Enter new security officer password:
Confirm password:
Security Officer Alice created successfully.
vcaadm{vcaN@hostname,sec_officer}> create so
New security officer name: Bob
Enter new security officer password:
Confirm password:
Security Officer Bob created successfully.
vcaadm{vcaN@hostname,sec_officer}> create user web_admin
Enter new user password:
Confirm password:
User web_admin created successfully.
vcaadm{vcaN@hostname,sec_officer}> create user
New user name: Tom
Enter new user password:
Confirm password:
User Tom created successfully.