5.5. Certificate-related commands and formats in IdM

The following table displays certificate-related commands in IdM with acceptable formats.

Expand

表 5.2. IdM certificate commands and formats
Command	Acceptable formats	Notes
`ipa user-add-cert some_user --certificate`	base64 PEM certificate
`ipa-server-certinstall`	PEM and DER certificate; PKCS#7 certificate chain; PKCS#8 and raw private key; PKCS#12 certificate and private key
`ipa-cacert-manage install`	DER; PEM; PKCS#7
`ipa-cacert-manage renew --external-cert-file`	PEM and DER certificate; PKCS#7 certificate chain
`ipa-ca-install --external-cert-file`	PEM and DER certificate; PKCS#7 certificate chain
`ipa cert-show <cert serial> --certificate-out /path/to/file.pem`	N/A	Creates the PEM-encoded `file.pem` file with the certificate having the `<cert_serial>` serial number.
`ipa cert-show <cert serial> --certificate-out /path/to/file.pem`	N/A	Creates the PEM-encoded `file.pem` file with the certificate having the `<cert_serial>` serial number. If the `--chain` option is used, the PEM file contains the certificate including the certificate chain.
`ipa cert-request --certificate-out=FILE /path/to/req.csr`	N/A	Creates the `req.csr` file in the PEM format with the new certificate.
`ipa cert-request --certificate-out=FILE /path/to/req.csr`	N/A	Creates the `req.csr` file in the PEM format with the new certificate. If the `--chain` option is used, the PEM file contains the certificate including the certificate chain.