Importing Admin Certificate into PKI CLI

Overview

This page describes the process to import the admin certificate into PKI CLI such that the admin certificate can be used from the command line.

This page assumes that the admin certificate and key are stored in a PKCS #12 file (e.g. ~/.dogtag/pki-tomcat/ca_admin_cert.p12) after CA installation.

Importing Admin Certificate

By default the PKI CLI uses an NSS database in ~/.dogtag/nssdb.

To import the PKCS #12 file into this NSS database, store the PKCS #12 file’s password in a file (e.g. pkcs12_password.txt), then execute the following command:

$ pki pkcs12-import \
    --pkcs12 ~/.dogtag/pki-tomcat/ca_admin_cert.p12 \
    --pkcs12-password-file pkcs12_password.txt

Then the certificate can be used by specifying a -n <nickname> parameter, for example:

$ pki -n caadmin ca-user-find