2.6. Adding a certificate to a user entry in the IdM CLI

Procedure

1. Log into the IdM CLI as an administrator if you want to add a certificate to another user:

   [user@client SmartCard]$ kinit admin

   For adding a certificate to your own profile, you do not need the administrator’s credentials.

   [user@client SmartCard]$ kinit <smartcard_user>

2. Create an environment variable containing the certificate with the header and footer removed and concatenated into a single line, which is the format expected by the ipa user-add-cert command:

   [user@client SmartCard]$ export CERT=`openssl x509 -outform der -in testuser.crt | base64 -w0 -`

   Note that certificate in the testuser.crt file must be in the PEM format.

3. Add the certificate to the profile of <smartcard_user> using the ipa user-add-cert command:

   [user@client SmartCard]$ ipa user-add-cert <smartcard_user> --certificate=$CERT

   The <smartcard_user> entry now contains an external certificate.