Skip to content

Importing Admin Certificate into PKI CLI

Jump to bottom
Endi S. Dewata edited this page May 5, 2021 · 14 revisions

Overview

This page describes the process to import the admin certificate into PKI CLI such that the admin certificate can be used from the command line.

This page assumes that the admin certificate and key are stored in a PKCS #12 file (e.g. ~/.dogtag/pki-tomcat/ca_admin_cert.p12) after CA installation.

Importing Admin Certificate

By default the PKI CLI uses an NSS database in ~/.dogtag/nssdb.

To import the PKCS #12 file into this NSS database, store the PKCS #12 file’s password in a file (e.g. pkcs12_password.txt), then execute the following command:

$ pki pkcs12-import \
    --pkcs12 ~/.dogtag/pki-tomcat/ca_admin_cert.p12 \
    --pkcs12-password-file pkcs12_password.txt

Then the certificate can be used by specifying a -n <nickname> parameter, for example:

$ pki -n caadmin ca-user-find
Tip
 To find a page in the Wiki, enter the keywords in search field, press Enter, then click Wikis.
Clone this wiki locally