chpartitioncertstore

Use the chpartitioncertstore command to manage the Secure Sockets Layer (SSL) certificate associated with the partitions created on the system.

Syntax

Read syntax diagramSkip visual syntax diagramchpartitioncertstore-install-partitionpartition_idpartition_namepartition_uuid-file<input cert file pathname>
Read syntax diagramSkip visual syntax diagramchpartitioncertstore-export-partitionpartition_idpartition_namepartition_uuid
Read syntax diagramSkip visual syntax diagramchpartitioncertstore-exportrootca-partitionpartition_idpartition_namepartition_uuid
Read syntax diagramSkip visual syntax diagramchpartitioncertstore-autorenewyesno-partitionpartition_idpartition_namepartition_uuid
Read syntax diagramSkip visual syntax diagramchpartitioncertstore-cancel-partitionpartition_idpartition_namepartition_uuid

Parameters

-install
(Optional) Specifies the installing of certificate.
-partition partition_name | partition_id| partition_uuid
(Optional) Specifies the name or ID or the UUID for which a certificate is created or installed.
-file input_file_pathname
(Optional) Specifies the absolute path name of the certificate to install.
-export
(Optional) Exports the full chain of installed SSL certificates for the partition. The certificate is exported to the /dumps/partition_certificate_slot_<partitionid>.pem directory on the configuration node.
-exportrootcacert
(Optional) Exports the installed SSL Root CA certificate for the partition. The certificate is exported to the /dumps/partition_rootcacertificate_slot_<partitionid>.pem directory on the configuration node.
-autorenew yes | no
(Optional) Turns automatic renewal on or off for the partition. When turned on, the system certificate will be renewed automatically 30 days before it expires. The -autorenew option is only supported when the certificate is signed by the system's root certificate authority. The default value when using an internally signed certificate is yes.
-cancel
(Optional) Cancel the certificate signing request for the partition to the external certificate authority that is currently in progress.

Description

Use this command to manage the SSL certificate associated with the specific partitions configured on the system.

The command can be used for the following items:
  • Install an externally signed certificate for the partition.
  • Export the full chain of installed certificates for the partition.
  • Export the installed SSL Root CA certificate for the partition.
  • Cancel an outstanding CSR for the partition.
  • Configure autorenewal for the partition.
Important: You must specify one of the following parameters:
  • -partition
  • -install
  • -export
  • -exportrootca
  • -cancel
  • -autorenew

An invocation example

The following example create a new system-signed SSL certificate:

svctask chpartitioncertstore -install -partition 0 -file /dumps/partition0.pem

The resulting output

No feedback.