cpca_client create_cert

Description

Issues a SIC certificate for the Security Management Server or Domain Management Server.

Note:

On a Multi-Domain Server, you must run this command in the context of the applicable Domain Management Server:

mdsenv <IP Address or Name of Domain Management Server>

Syntax

cpca_client [-d] create_cert [-p <CA port number>] -n "CN=<Common Name>" -f <Full Path to PKCS12 file> [-w <Password>] [-k {SIC | USER | IKE | ADMIN_PKG}] [-c "<Comment for Certificate>"]

Parameters

Parameter

Description

-d

Runs the command in debug mode.

Use only if you troubleshoot the command itself.

Best Practice - If you use this parameter, then redirect the output to a file, or use the script command to save the entire CLI session.

-p <CA port number>

Specifies the TCP port on the Security Management Server or Domain Management Server, which is used to connect to the Certificate Authority.

The default TCP port number is 18209.

-n "CN=<Common Name>"

Sets the CN to the specified <Common Name>.

-f <Full Path to PKCS12 file>

Specifies the PKCS12 file, which stores the certificate and keys.

-w <Password>

Optional. Specifies the certificate password.

-k {SIC | USER | IKE | ADMIN_PKG}

Optional. Specifies the certificate kind.

-c "<Comment for Certificate>"

Optional. Specifies the certificate comment (must enclose in double quotes).

Example

[Expert@MGMT:0]# cpca_client create_cert -n "cn=cp_mgmt" -f $CPDIR/conf/sic_cert.p12