Appearance
Example: Force Keystore Setup
The following output shows an example of the output and prompts when you use the force
option with the keystore setup command.
CAUTION:
This command erases all of the drive keys in the keystore, then re-creates it.
YBCLI (PRIMARY)> keystore setup force
You have entered the 'setup' command with the 'force' option, which will erase all drive keys in the keystore.
WARNING: Potential data loss. Please read the following information carefully.
-> If encryption is not enabled on any of the drives, you are safe to proceed.
-> If encryption is enabled, all data on the encrypted drives will be lost unless you can restore the keystore from a backup.
-> If you cannot restore the keystore, each encrypted drive will have to be manually unlocked by using the key printed on its label. All data will be lost.
If you do not want to run the command with the force option, enter 'no' below.
Are you sure you want to do this?: yes
Forcing keystore initialization
Stopping keystore and reinitializing. Standby... Done
Starting keystore. Standby... Done
Setting up the keystore. Standby...
The system will generate two types of keys:
-> A single authentication key
-> One or more keys to unlock the keystore
At least one of each type of key is required.
Note: You can request up to 5 keystore unlock keys. In this way, multiple administrators can unlock the keystore
using a combination of keys. No single key has to be distributed to a single administrator.
How many unlock keys should be generated for the keystore? (1 to 5): 1
1 key will be required to unlock the keystore
Successfully initialized the keystore. Please store the keys listed below in a secure location.
The following 1 key is used to unlock the keystore after system bootup or failover:
Note: 1 of 1 key(s) are required for unlocking the keystore.
Keystore unlock key 1: 1c980bf78d027facb30e5ca2df401c1227d3292690a527566e24098955e02c07
The following key is used to authenticate to the keystore (required by any encryption command):
Authentication key: e8a96833-c8a8-065e-7927-e91f4f932e08
Keys have been generated. Please store them in a safe place.
Do you want to create a backup of the keystore?
Type yes to continue: yes
Stopping the keystore service before backup. Standby... Done
Backing up keystore. Standby... Done
Starting the keystore service after backup. Standby... Done
The keystore has been backed up successfully to:
/tmp/ybd-ks-11-09-2019-19-48-56.tar.gz
Please copy the backup to another machine. The backup is located on this system at:
yb00-mgr0.yellowbrick.io:/tmp/ybd-ks-11-09-2019-19-48-56.tar.gz
MD5: 038e793f0571e32f34b4d554cf2cec66
Do you want to unlock the keystore (not required)?
Type yes to continue: no
Keystore will not be unlocked
Parent topic:Setting Up Encryption