Setting up Secure Sockets Layer Storing user IDs and passwords in a stash file Installing and configuring Tivoli Storage Manager Setting up Secure Sockets Layer (SSL) is optional. If you decide to use SSL, complete the  following steps: /opt/IBM/ondemand/V9.5/config  To create the key database, run a command that is similar to the following command: gsk8capicmd_64 -keydb -create -db "ondemand.kdb" -pw "myKeyDBpasswd" -stash  -populate You can store user IDs and passwords in  stash  files (encrypted files). By storing passwords in  a stash file, you can improve security because you do not need to specify the password on  the command line, where the password might be visible to others. To store the user IDs and passwords in a stash file, complete the following steps: When you configure the Content Manager OnDemand instance, you modify the  ARS.INI  file to  include the  SRVR_OD_STASH  parameter and specify the directory that you specified in step 2: SRVR_OD_STASH=/opt/IBM/ondemand/V9.5/config/ars.stash Before you begin, familiarize yourself with configuring and managing server storage, as  described in the Tivoli Storage Manager for AIX Administrator’s Guide,  GC32-0768 .  In  addition, the  IBM Tivoli Storage Manager for AIX Administrator’s Reference , SC32-0123,  provides information about all of the commands that are used in this section. This book is your primary reference when you work with IBM Tivoli Storage Manager. If you encounter  problems while you configure Tivoli Storage Manager or if the examples in this section do not  provide the information that you need to define your server storage devices, policies, and  operations, see these Tivoli Storage Manager publications. Chapter 2. Setting up a Content Manager OnDemand instance  21 1. Create the key database and store it in the  config  subdirectory of the Content Manager  OnDemand server installation directory: 2. Create a digital certificate. 3. Configure the Content Manager OnDemand for AIX server. Add the following lines to the  ARS.INI  file: 4. Restart the Content Manager OnDemand server. 1. Create a stash file by running the  arsstash  command. The command prompts you for the  password. For a description of the syntax of the  arsstash  command and an example of  the command, see “Syntax of  the ARSSTASH command” in the  IBM Content Manager  OnDemand for Multiplatforms - Installation and Configuration Guide , SC18-9232. 2. Save the stash file in a directory with limited access to that file. You can set this access by  using file permissions. SSL_PORT= port_number SSL_KEYRING_FILE=/opt/IBM/ondemand/V9.5/config/ondemand.kdb SSL_KEYRING_STASH=/opt/IBM/ondemand/V9.5/config/ondemand.sth SSL_KEYRING_LABEL=IBM Content Manager OnDemand SSL_CLNT_USE_SSL=0