Federation Manager Installation and Upgrade Guide › Key Tool Reference › Add a Certificate

Add a Certificate

Use the addCert option to add a public certificate or trusted CA certificate to the certificate data store.

Consider the following items:

• The certificate can be a certificate that is associated with a private key/certificate pair. However, only the certificate is added to the certificate data store.
• If you trust a certificate as a Certificate Authority, this certificate is always treated as a CA certificate.
• For X.509 certificate formats, SiteMinder supports V1, V2, and V3 versions. For encoding formats, SiteMinder supports DER and PEM formats.
• Restart the Web Agent when you add a Certificate Authority certificate.
• Delete the certificate metadata from the certificate file before importing it. Import only the data starting with the --BEGIN CERTIFICATE-- marker and ending with the --END CERTIFICATE-- marker. Be sure to include the markers.

Arguments for this option include the following:

-accessLegacyKS

Specifies that the option applies to the legacy smkeydatabase. If you do not supply this argument, the option applies to the r12.5 certificate data store.

-alias alias

Required. Specifies the alias to the certificate associated with the private key in the certificate data store.

Limit: A unique string that contains only alphanumeric characters.

-infile cert_file

Required. Specifies the full path to the location of the newly added certificate.

-trustcacert

Optional. Checks that the user provider certificate being added is a CA certificate. The utility checks that the certificate has a digital signature extension and that the certificate has the same IssuerDN and Subject DN values.

-noprompt

(Optional) The user is not prompted to confirm the addition of the certificate.