Federation Security Services Guide › Manage the Key Database for Signing and Encryption › Modify the Key Database Using smkeytool › Smkeytool Command Syntax and Options › addCert Option

addCert Option

Adds a certificate to the key database.V1, V2, and V3 versions for X.509 certificate format are supported DER and PEM encoding formats are supported. Restart the Web Agent when you add a Certificate Authority certificate.

If you indicate that you want to trust the certificate as a Certificate Authority, this certificate will always be treated as a CA certificate.

Arguments for addCert are as follows:

• -alias <alias>

  Required. Alias to the certificate associated with this private key in the database. Must be a unique string and should contain only alphanumeric characters.

• -infile <cert_file>

  Required. Full path to the location of the newly added certificate.

• -trustcacert

  Optional. Checks that the user provider certificate being added is a CA certificate. Smkeytool checks that the certificate has a digital signature extension and that the certificate has the same IssuerDN and Subject DN values.

• -noprompt

  (Optional) The user will not be prompted to confirm the addition of the certificate.