Keymgmt Export

Exports the content of a credential store or exports a named encryption key from a server ID file. Done as a prerequisite to keymgmt import.

Details

Use this command to:
  • Export the content of a credential store to a database. Do this to prepare to import the content into a different credential store. For example, do this when moving a credential store from single server configuration to cluster configuration or vice versa. Any encrypted document in the credential store is decrypted with the named encryption key and encrypted with the target server's public key before being placed in the target database.
  • Export a named encryption key in a server ID file to a file. For example, do this in a cluster to prepare to then import the key into the ID file of another server in the cluster that will use the associated credential store.

Syntax: Export content of credstore.nsf

To export the content of a credential store, enter the following command from the server on which it resides:
 keymgmt export credstore <database> <target_server> 
where
  • <database> is the name of a database to create on the local server to store the exported content.
  • <target_server> is the Notes hierarchical name of the server with the credential store you are switching to.

You must copy the database to the data directory of the target server in order to next use keymgmt import to import the content into the target server credential store.

Any encrypted document in the credential store is decrypted with the name encryption key and encrypted with the target server's public key before being placed in the target database.

For example:
keymgmt export credstore credstorecopy.nsf hubserver/renovations 

Syntax: Export a named encryption key

To export a named encryption key from a server ID file and save it in the server data directory, enter the following command:
keymgmt export nek <nekname> <nekname>.key  <password>
where <nekname> is the name of the key, <nekname>.key is the name of the key file, and <password> is a password for the key file.
For example:
 keymgmt export nek credstorekey credstorekey.key passw0rd