IBM Tivoli Access Manager WebSEAL: WebSEAL key error cannot be started-CodePudding

1. CD/var/pdweb/keytab - Webseal *
The ls - al
Rw -- -- -- -- -- -- -- 1 ivmgr ivmgr 10088 Feb 04 10:06 instance - webseald. KDB
Rw -- -- -- -- -- -- -- 1 ivmgr Feb ivmgr 0 04 10:06 instance - webseald. STH

2. Backup example
Pdbackup - action backup list/opt/pdweb/etc/amwebbackup - instance. LST

3. Verify the backup
Tar - TVF/var/PolicyDirector pdbackup/amwebbackup - instance. Lst_03MonthYYY. HH_MM. Tar

4. Delete and recreate the instance user account
SVRSSLCFG - unconfig - f/dev/null - n instance - webseald - h hostname -a sec_master -p mima

5. Remove the original key file
Rm/var/pdweb/keytab - the instance/instance - webseald. KDB
Rm/var/pdweb/keytab - the instance/instance - webseald. STH

6. New accounts to regenerate the key file
SVRSSLCFG - config - f/opt/pdweb/etc/webseald - Webseal *. Conf - d/var/pdweb/keytab * (keytab directory) - n - Webseal instance - weseald * (name of Webseal instances) - h hostname -a sec_master password - P - r - 7235 - S S local - yes - l g SecurityGroup, secmgrd - the servers, Webseal servers -

7. Restart webseal
Pdweb start Webseal

8. To view the webseal real-time log
CD/var/pdweb/log/
The cat webseal. Log