Configuration Guides › Federation Security Services Guide › Signing and Encrypting Messages to Secure Federated Transactions › Modify the Key Database Using smkeytool › Smkeytool Command Syntax and Options › addCert Option

addCert Option

Adds only a certificate to the key database. Use this command option only to import a public certificate. The certificate can be a certificate associated with a private key/certificate pair; however, you are only adding the certificate to the key database. You can also use this command to import trusted CA certificates.

Note: If you trust a certificate as a Certificate Authority, this certificate is always treated as a CA certificate.

For X.509 certificate formats, SOA Security Manager supports V1, V2, and V3 versions. For encoding formats, SOA Security Manager supports DER and PEM formats. Restart the Web Agent when you add a Certificate Authority certificate.

Arguments for addCert are as follows:

-alias <alias>

Required. Alias to the certificate associated with this private key in the database. Must be a unique string and should contain only alphanumeric characters.

-infile <cert_file>

Required. Full path to the location of the newly added certificate.

-trustcacert

Optional. Checks that the user provider certificate being added is a CA certificate. Smkeytool checks that the certificate has a digital signature extension and that the certificate has the same IssuerDN and Subject DN values.

-noprompt

(Optional) The user will not be prompted to confirm the addition of the certificate.