1pki-user-cert(1)   PKI User Certificate Management Commands   pki-user-cert(1)
2
3
4

NAME

6       pki-user-cert  -  Command-line interface for managing PKI user certifi‐
7       cates.
8
9

SYNOPSIS

11       pki [CLI-options] <subsystem>-user-cert
12       pki [CLI-options] <subsystem>-user-cert-find user-ID [command-op‐
13       tions]
14       pki   [CLI-options]  <subsystem>-user-cert-show  user-ID  cert-ID
15       [command-options]
16       pki [CLI-options] <subsystem>-user-cert-add user-ID  [command-op‐
17       tions]
18       pki [CLI-options] <subsystem>-user-cert-del user-ID cert-ID [com‐
19       mand-options]
20
21

DESCRIPTION

23       The pki <subsystem>-user-cert commands provide  command-line  in‐
24       terfaces to manage user certificates on the specified subsystem.
25
26
27       Valid subsystems are ca, kra, ocsp, tks, and tps.
28
29
30       pki [CLI-options] <subsystem>-user-cert
31           This command is to list available user certificate commands for the
32       subsystem.
33
34
35       pki [CLI-options] <subsystem>-user-cert-find user-ID [command-op‐
36       tions]
37           This command is to list certificates owned by the subsystem user.
38
39
40       pki   [CLI-options]  <subsystem>-user-cert-show  user-ID  cert-ID
41       [command-options]
42           This command is to view the details of a certificate owned  to  the
43       subsystem user.
44
45
46       pki  [CLI-options] <subsystem>-user-cert-add user-ID [command-op‐
47       tions]
48           This command is to add a certificate to the subsystem user.
49
50
51       pki [CLI-options] <subsystem>-user-cert-del user-ID cert-ID [com‐
52       mand-options]
53           This command is to delete a certificate from the subsystem user.
54
55

OPTIONS

57       The CLI options are described in pki(1).
58
59

OPERATIONS

61       To  view  available  user  certificate  commands,  type pki <subsys‐
62       tem>-user-cert.  To view each command's usage, type pki  <subsys‐
63       tem>-user-cert-<command> --help.
64
65
66       All  user certificate commands must be executed as the subsystem admin‐
67       istrator.
68
69
70       For example, to list certificates owned by a CA user execute  the  fol‐
71       lowing command:
72
73
74              $ pki <CA admin authentication> ca-user-cert-find testuser
75
76
77
78       The results can be paged by specifying the (0-based) index of the first
79       entry to return and the maximum number of entries returned:
80
81
82              $ pki <CA admin authentication> ca-user-cert-find testuser --start 20 --size 10
83
84
85
86       The above command will return entries #20 to #29.
87
88
89       To view a certificate owned by a CA user, specify the user ID  and  the
90       certificate ID in the following command:
91
92
93              $ pki <CA admin authentication> ca-user-cert-show testuser \
94                  "2;11;CN=CA Signing Certificate,O=EXAMPLE;UID=testuser"
95
96
97
98       To  add a certificate to a CA user from a file, specify the user ID and
99       the input file:
100
101
102              $ pki <CA admin authentication> ca-user-cert-add testuser --input testuser.crt
103
104
105
106       To add a certificate to a CA  user  from  the  certificate  repository,
107       specify the user ID and the serial number:
108
109
110              $ pki <CA admin authentication> ca-user-cert-add testuser --serial 0x80
111
112
113
114       To  delete  a  certificate  from a CA user, specify the user ID and the
115       certificate ID in the following command:
116
117
118              $ pki <CA admin authentication> ca-user-cert-del testuser \
119                  "2;11;CN=CA Signing Certificate,O=EXAMPLE;UID=testuser"
120
121
122

AUTHORS

124       Endi S. Dewata <edewata@redhat.com>.
125
126

COPYRIGHT

128       Copyright (c) 2015 Red Hat, Inc.  This is licensed under the  GNU  Gen‐
129       eral  Public  License,  version  2  (GPLv2).  A copy of this license is
130       available at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
131
132
133
134PKI                               Jun 3, 2015                 pki-user-cert(1)