Update a CSR

About this task

Use the manageCSRs -update command to update a pending CSR with the CA-signed certificate. Stop CM before you run this command.

Consider the following when using this command:

If the key certificate is created in an HSM and you specify the engine parameter, the command notifies the engine to update the key certificate on the HSM. Configure HSM support at the engine to use this command.
If a netHSM is used and multiple engines access it, any of the engines can be specified to perform the update.
If the engine uses a PCI module and that module cannot be accessed by other engines, you must group the key certificates for the engine in a separate system certificate store. You cannot share the key certificates on that system certificate store with other engines.
If the key certificate was created in an HSM and you do not specify the engine parameter, the command updates the key certificate on the HSM at CM. You must enable HSM support at CM.
If the key certificate was not created in an HSM, it is updated on the Secure Proxy system certificate store. The engine parameter is ignored.

To update a pending CSR, type the following command:

manageCSRs -update [parameters]

Following is a description of the update parameters:


Parameter	Description
csrName	Name for the CSR. Required.
engine	Name of the engine with access to the HSM. Optional.
file	Fully-qualified path of the CA-signed certificate file. Required.
certName	Name of the key certificate on Secure Proxy. Required.
systempass	CM system passphrase.
adminid	Administrator ID. Optional. Prompts if not defined.
adminpass	Administrator password. Optional. Prompts if not defined.
newKeyStorePass	New HSM keystore password. Optional. If defined, this value overrides the keystore password used when the CSR was created. This parameter allows you to update a CSR on the HSM after the keystore password for the HSM is changed.