3.3. Copying certificates from Active Directory using sftp

Procedure

1. Connect from the IdM server and copy the adcs-winserver-ca.cer root certificate to the IdM server:

   root@idmserver ~]# sftp Administrator@winserver.ad.example.com
   Administrator@winserver.ad.example.com's password:
   Connected to Administrator@winserver.ad.example.com.
   sftp> cd _<path_to_certificates>_
   sftp> ls
   adcs-winserver-ca.cer    aduser1.pfx
   sftp>
   sftp> get adcs-winserver-ca.cer
   Fetching _<path_to_certificates>_/adcs-winserver-ca.cer to adcs-winserver-ca.cer
   _<path_to_certificates>_/adcs-winserver-ca.cer                 100%  1254    15KB/s 00:00
   sftp quit

2. Connect from the IdM client and copy the aduser1.pfx user certificate to the client:

   [root@client1 ~]# sftp Administrator@winserver.ad.example.com
   Administrator@winserver.ad.example.com's password:
   Connected to Administrator@winserver.ad.example.com.
   sftp> cd /_<path_to_certificates>_
   sftp> get aduser1.pfx
   Fetching _<path_to_certificates>_/aduser1.pfx to aduser1.pfx
   _<path_to_certificates>_/aduser1.pfx                 100%  1254    15KB/s 00:00
   sftp quit

   Now the CA certificate is stored in the IdM server and the user certificates is stored on the client machine.