mktruststore
Use the mktruststore command to create the certificate store that contains the certificate bundle.
Syntax
Parameters
- -file file_path
- (Required) Specifies the location of the file to import the certificates. The file path must not include special characters, such as parentheses.
- -grid on | off
- (Optional) Specifies the certificate in the truststore that is to be used for grid use case. The parameter sets -restapi on as required by the grid use case. It is mutually exclusive with all other parameters.
- -name truststore_name
- (Optional) Specifies the name for the new certificate store.
- -restapi on | off
- (Optional) Specifies the certificates in the store are used for the REST API. Values can be on or off.
- -ipsec on | off
- (Optional) Specifies the certificates in the store are used for the IPsec service. Values can be on or off.
- -email on | off
- (Optional) Specifies the certificates in the store are used to validate the email server. Values can be on or off.
- -snmp on | off
- (Optional) Specifies the certificates in the store are used to validate the SNMP servers. Values can be on or off. Default is set to off.
- -syslog on | off
- (Optional) Specifies the certificates to be bundled and provided to rsyslog client for making TLS connections. Values can be on or off.
Note: This command is available during the upgrade
process.
An invocation example
mktruststore -file /tmp/certificate-bundle.pem The resulting output:
No feedback.