1

Is there any utility that can be used to generate LTPA token keys for the WebSphere Liberty Profile. I am aware of the Liberty generating token by itself whenever we start the liberty server.

Also I have found a utility which helps one to generate LTPA for Domino based. But it doesn't work for WebSphere as we don't have a server secret.

My requirement is to generate the keys externally. Any help here is appreciated.

krckumar
  • 544
  • 4
  • 21

1 Answers1

3

Liberty automatically generates LTPA key and stores to ${server.output.dir}/resources/security/ltpa.keys. See more details here - Configuring LTPA in Liberty.

So if you want to generate your own just configure your own password in server.xml, like this: 

<ltpa keysFileName="yourLTPAKeysFileName.keys" keysPassword="keysPassword" expiration="120" />

and it will generate keys using your password.

There is no standalone external tool. You can just use separate version of Liberty to create it and than share wherever you need.

Gas
  • 17,601
  • 4
  • 46
  • 93
  • 1
    Actually, in the latest Liberty Beta (August 2016) available here: https://developer.ibm.com/wasdev/downloads/liberty-profile-beta/ a new standalone tool was introduced to create LTPA keys. It's part of the securityUtility, so you would do /wlp/bin/securityUtility createLTPAKeys – M. Broz Jul 27 '16 at 18:01