Note on usage
Function: Modify RSA key
User group: FT administrator
Functional description
You can use the ftmodk command to modify the expiration date and authentication level of keys that are used for the authentication of partner systems. The changes are stored in the relevant key file.
Once the expiration date of a key has been reached, authentication using this key is rejected. However, you can still modify the expiration date after the key's validity has expired, e.g. in order to temporarily re-enable so that a current key can be transferred securely.
Format
ftmodk -h |
[ -id=<identification1..64> | -id=@a ] |
[ -pn=<partner 1..200> | -pn=@a ]
[ -al=1 | -al=2 ]
[ -exp=[yyyymmdd] ]
Description
-h
Outputs the command syntax on screen. Any specifications after -h are ignored.
-id=identification | -id=@a
identification is the instance identification of the partner whose key is to be modified. -id must not be specified in combination with -pn.
@a
The installed keys of all partner systems are modified.
-pn=partner | -pn=@a
partner is the name of the partner system in the partner list or the address of the partner system whose key is to be modified.
-pn must not be specified in combination with -id.
You will find detailed information on address specifications in the section “Specifying partner addresses” .
@a
The installed keys of all partner systems are modified.
Neither -id nor -pn specified
The installed keys of all partner systems are modified.
-al=1 | -al=2 (authentication level)
Specifies the authentication level for the key or keys.
1
The authentication level for the partner or partners is set to 1. This corresponds to the possibilities available up to openFT V11.0A.
If the partner system is subsequently authenticated at level 2 then the entry AUTHENTICATION-LEVEL=2 is automatically recorded in its key file.
2
The partner system supports the level 2 authentication procedure introduced in openFT V11.0B. Level 1 authentication attempts are rejected.
-al not specified
The authentication level is unchanged.
-exp=[yyyymmdd]
Specifies the expiration date of the key or keys.
yyyymmdd
Expiration date in the format yyyymmdd, e.g. 20171231 for 31.12.2017. The key or keys can be used for authentication at the latest up until 00:00 on the specified date.
No date specified
exp= without a date specification means that there is no expiration date for the key or keys.
-exp not specified
The expiration date of the key or keys is unchanged.