Revoke key pairs

When revoking keys, the private key must be revoked from Teamcenter. The public key must be revoked from the keystore deployed with the FSC. To deactivate only particular sites, maintain the private key in Teamcenter and only revoke the public key from the particular sites. When working with a Multi-Site federation, revoke the public key at each site where the key is used. Perform the following steps from a Teamcenter command prompt. Commands requiring credentials must be run by a Teamcenter administrator with DBA privileges. Revoke the private key from Teamcenter Use the install_fms_keys utility to revoke the private key from Teamcenter as follows: Copy install_fms_keys -u=Tc-admin-user -p=password -g=group -f=delete Revoke the public key from the keystore deployed with the FSC Procedure Use the keygen utility to revoke a public key from the keystore deployed with the FSC as follows: Copy keygen -deletekey -keystore keystore_name -storepass key_pass -alias pub_key_alias Where: keystore_name The file name of the .p12 keystore file created earlier. key_pass The password of the .p12 file holding the public key. pub_key_alias The public key (stored in the .p12 keystore file) alias. The alias is the same as site_ID. If the alias name contains a dash (-) at its beginning, which is common for Teamcenter site IDs, exclude the dash when specifying the value for the -alias parameter. For example, if the alias is -12345678, specify the value as 12345678. Remove or update (as appropriate) the ticketkeys section of the FMS primary configuration file (FSC_HOME\fmsmaster_fscid.xml). Remove (or update) the following line in the FMS server configuration properties file (FMS_HOME\fsc.properties or FSC_HOME\fsc_fscid.properties): Copy com.teamcenter.fms.public.keystore.epassword=epassword Remove (or update) the following lines in the FSC_HOME\fscadmin.properties. Copy com.teamcenter.fms.signing.keystore.file=keystore_path Copy com.teamcenter.fms.signing.keystore.epassword=epassword