1pki-server-tps(8)         PKI TPS Management Commands        pki-server-tps(8)
2
3
4

NAME

6       pki-server-tps - Command-Line Interface for managing PKI TPS.
7
8

SYNOPSIS

10       pki-server [CLI-options] tps-clone-prepare [command-options]
11       pki-server [CLI-options] tps-db-vlv-find [command-options]
12       pki-server [CLI-options] tps-db-vlv-add [command-options]
13       pki-server [CLI-options] tps-db-vlv-del [command-options]
14       pki-server [CLI-options] tps-db-vlv-reindex [command-options]
15       pki-server [CLI-options] tps-audit-event-find [command-options]
16       pki-server   [CLI-options]   tps-audit-event-enable   [command-options]
17       event-ID
18       pki-server   [CLI-options]   tps-audit-event-modify   [command-options]
19       event-ID
20       pki-server   [CLI-options]   tps-audit-event-disable  [command-options]
21       event-ID
22       pki-server [CLI-options] tps-audit-file-find [command-options]
23       pki-server [CLI-options] tps-audit-file-verify [command-options]
24
25
26       .SH DESCRIPTION
27
28
29       The pki-server tps commands provide command-line interfaces  to  manage
30       PKI TPS.
31
32
33       pki-server [CLI-options] tps [command-options]
34           This command is to list available PKI TPS management commands.
35
36
37       pki-server [CLI-options] tps-clone-prepare [command-options]
38           This  command  export  TPS system certificates into a PKCS #12 file
39       with private keys.
40
41
42       pki-server [CLI-options] tps-db-vlv-find [command-options]
43           This command will list VLV records for TPS.
44
45
46       pki-server [CLI-options] tps-db-vlv-add [command-options]
47           This command will add VLV records for TPS.
48
49
50       pki-server [CLI-options] tps-db-vlv-del [command-options]
51           This command will delete VLV records for TPS.
52
53
54       pki-server [CLI-options] tps-db-vlv-reindex [command-options]
55           This command will reindex VLV records for TPS.
56
57
58       pki-server [CLI-options] tps-audit-event-find [command-options]
59           This command list all the audit events which are enabled/disabled.
60
61
62       pki-server   [CLI-options]   tps-audit-event-enable   [command-options]
63       event-ID
64           This command will enable audit events in the TPS.
65
66
67       pki-server   [CLI-options]   tps-audit-event-disable  [command-options]
68       event-ID
69           This command will disable audit events in the TPS.
70
71
72       pki-server   [CLI-options]   tps-audit-event-modify   [command-options]
73       event-ID
74           This command will modify the event filter for audit events.
75
76
77       pki-server [CLI-options] tps-audit-file-find [command-options]
78           This command lists audit log files generated by the TPS.
79
80
81       pki-server [CLI-options] tps-audit-file-verify [command-options]
82           This  command  will  verify whether the signatures in the audit log
83       files are valid.
84
85

AUDIT EVENTS

87       Logging audit events:
88
89
90              · AUDIT_LOG_STARTUP
91
92              · AUDIT_LOG_SHUTDOWN
93
94              · AUDIT_LOG_DELETE
95
96              · LOG_PATH_CHANGE
97
98              · LOG_EXPIRATION_CHANGE
99
100              · CONFIG_SIGNED_AUDIT
101
102
103
104       Authentication and authorization audit events:
105
106
107              · AUTHZ
108
109              · AUTH
110
111              · ROLE_ASSUME
112
113              · CONFIG_AUTH
114
115              · CONFIG_ROLE
116
117              · ACCESS_SESSION_ESTABLISH
118
119              · ACCESS_SESSION_TERMINATED
120
121
122
123       Key audit events:
124
125
126              · PRIVATE_KEY_ARCHIVE_REQUEST
127
128              · PRIVATE_KEY_ARCHIVE_REQUEST_PROCESSED
129
130              · PRIVATE_KEY_EXPORT_REQUEST_PROCESSED_SUCCESS
131
132              · CONFIG_TRUSTED_PUBLIC_KEY
133
134              · PRIVATE_KEY_EXPORT_REQUEST_PROCESSED_FAILURE
135
136              · KEY_RECOVERY_REQUEST
137
138              · KEY_RECOVERY_REQUEST_ASYNC
139
140              · KEY_RECOVERY_AGENT_LOGIN
141
142              · KEY_RECOVERY_REQUEST_PROCESSED
143
144              · KEY_RECOVERY_REQUEST_PROCESSED_ASYNC
145
146              · KEY_GEN_ASYMMETRIC
147
148              · COMPUTE_SESSION_KEY_REQUEST_PROCESSED_SUCCESS
149
150              · COMPUTE_SESSION_KEY_REQUEST
151
152              · COMPUTE_SESSION_KEY_REQUEST_PROCESSED_FAILURE
153
154              · DIVERSIFY_KEY_REQUEST
155
156              · DIVERSIFY_KEY_REQUEST_PROCESSED_SUCCESS
157
158              · DIVERSIFY_KEY_REQUEST_PROCESSED_FAILURE
159
160              · SERVER_SIDE_KEYGEN_REQUEST
161
162              · SERVER_SIDE_KEYGEN_REQUEST_PROCESSED_SUCCESS
163
164              · SERVER_SIDE_KEYGEN_REQUEST_PROCESSED_FAILURE
165
166
167
168       CMC audit events:
169
170
171              · CMC_RESPONSE_SENT
172
173              · CMC_ID_POP_LINK_WITNESS
174
175              · CMC_SIGNED_REQUEST_SIG_VERIFY
176
177              · CMC_PROOF_OF_IDENTIFICATION
178
179              · CMC_REQUEST_RECEIVED
180
181              · CMC_USER_SIGNED_REQUEST_SIG_VERIFY
182
183              · PROOF_OF_POSSESSION
184
185
186
187       Profile audit events:
188
189
190              · CONFIG_CERT_PROFILE
191
192              · CONFIG_CRL_PROFILE
193
194              · CONFIG_OCSP_PROFILE
195
196
197
198       Certificate audit events:
199
200
201              · CERT_SIGNING_INFO
202
203              · CERT_PROFILE_APPROVAL
204
205              · CERT_REQUEST_PROCESSED
206
207              · CERT_STATUS_CHANGE_REQUEST
208
209              · CERT_STATUS_CHANGE_REQUEST_PROCESSED
210
211              · CONFIG_CERT_POLICY
212
213              · PROFILE_CERT_REQUEST
214
215              · CIMC_CERT_VERIFICATION
216
217              · NON_PROFILE_CERT_REQUEST
218
219
220
221       ACL audit events:
222
223
224              · CONFIG_ACL
225
226
227
228       OCSP audit events:
229
230
231              · OCSP_SIGNING_INFO
232
233              · OCSP_GENERATION
234
235
236
237       CRL audit events:
238
239
240              · SCHEDULE_CRL_GENERATION
241
242              · DELTA_CRL_PUBLISHING
243
244              · CRL_VALIDATION
245
246              · CRL_RETRIEVAL
247
248              · CRL_SIGNING_INFO
249
250              · FULL_CRL_GENERATION
251
252              · DELTA_CRL_GENERATION
253
254
255
256       Authority audit events:
257
258
259              · AUTHORITY_CONFIG
260
261              · SECURITY_DOMAIN_UPDATE
262
263              · CONFIG_DRM
264
265
266
267       Selftest audit events:
268
269
270              · SELFTESTS_EXECUTION
271
272
273
274       Encryption data audit events:
275
276
277              · CONFIG_ENCRYPTION
278
279              · ENCRYPT_DATA_REQUEST
280
281              · ENCRYPT_DATA_REQUEST_PROCESSED_SUCCESS
282
283              · ENCRYPT_DATA_REQUEST_PROCESSED_FAILURE
284
285              · COMPUTE_RANDOM_DATA_REQUEST
286
287              · COMPUTE_RANDOM_DATA_REQUEST_PROCESSED_FAILURE
288
289              · COMPUTE_RANDOM_DATA_REQUEST_PROCESSED_SUCCESS
290
291              · SECURITY_DATA_ARCHIVAL_REQUEST
292
293
294
295       Serial/random number audit events:
296
297
298              · INTER_BOUNDARY
299
300              · CONFIG_SERIAL_NUMBER
301
302              · RANDOM_GENERATION
303
304
305

AUTHORS

307       Amol Kahat <akahat@redhat.com>.
308
309

COPYRIGHT

311       Copyright (c) 2018 Red Hat, Inc.  This is licensed under the  GNU  Gen‐
312       eral  Public  License,  version  2  (GPLv2).  A copy of this license is
313       available at ⟨http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt⟩.
314
315
316
317PKI                              Mar 21, 2018                pki-server-tps(8)