Previous topic |
Next topic |
Contents |
Contact z/OS |
Library |
PDF
Using the pkiprereg utility z/OS Cryptographic Services PKI Services Guide and Reference SA23-2286-00 |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
PurposeThe pkiprereg program creates Simple Certificate Enrollment Protocol (SCEP) preregistration records in batch. Path setupUpdate your PATH, LIBPATH, and
NLSPATH environment variables with the appropriate pkiserv directory
before you run pkiprereg. (Note that you are updating
the environment variables for the user running the utility, not updating
values in the PKI Services environment
variables file, pkiserv.envars.) Once you have updated
these variables, you can run pkiprereg from the UNIX command line.
Format
ParametersYou can display usage information about the pkiprereg command format and parameters when you execute the pkiprereg utility command with the -h or -? option or when you enter an incorrect parameter.
InputThe input for the pkiprereg utility
is a data file (SCEP-file) containing
preregistration records. The rules regarding format of the preregistration
records are as follows:
Rules:
The following field names are supported in the
preregistration record.
The following field names are supported
as input to the pkiprereg utility, but they are not
intended for use with SCEP certificates.
For information on the format required for these values, see the R_PKIServ (IRRSPX00) section of z/OS Security Server RACF Callable Services. ExamplesThe following example shows two
preregistration records in the /etc/scep.txt file.
The following command examples produce the actions listed: Example 1:
Action: Verifies
the /etc/scep.txt file, indicating that one PassPhrase
has an incorrect value, the placeholder (*).Example
2:
Action: Generates
a passphrase for the placeholder and saves the records in the /etc/scepfinal.txt output
file.Example 3:
Action: Loads
the preregistration records into PKI Services. If the
template identified by the nickname 5YSCEPP contains
any subject or alternate name information in the <CONSTANT> section,
that information overrides any matching information specified in the /etc/scepfinal.txt file. |
Copyright IBM Corporation 1990, 2014
|