NAME¶

pki-server-tps - Command-Line Interface for managing PKI TPS.

SYNOPSIS¶

pki-server [CLI-options] tps-clone-prepare [command-options]
pki-server [CLI-options] tps-db-vlv-find [command-options]
pki-server [CLI-options] tps-db-vlv-add [command-options]
pki-server [CLI-options] tps-db-vlv-del [command-options]
pki-server [CLI-options] tps-db-vlv-reindex [command-options]
pki-server [CLI-options] tps-audit-event-find [command-options]
pki-server [CLI-options] tps-audit-event-enable [command-options] event-ID
pki-server [CLI-options] tps-audit-event-modify [command-options] event-ID
pki-server [CLI-options] tps-audit-event-disable [command-options] event-ID
pki-server [CLI-options] tps-audit-file-find [command-options]
pki-server [CLI-options] tps-audit-file-verify [command-options]

.SH DESCRIPTION

The pki-server tps commands provide command-line interfaces to manage PKI TPS.

pki-server [CLI-options] tps [command-options]
This command is to list available PKI TPS management commands.

pki-server [CLI-options] tps-clone-prepare [command-options]
This command export TPS system certificates into a PKCS #12 file with private keys.

pki-server [CLI-options] tps-db-vlv-find [command-options]
This command will list VLV records for TPS.

pki-server [CLI-options] tps-db-vlv-add [command-options]
This command will add VLV records for TPS.

pki-server [CLI-options] tps-db-vlv-del [command-options]
This command will delete VLV records for TPS.

pki-server [CLI-options] tps-db-vlv-reindex [command-options]
This command will reindex VLV records for TPS.

pki-server [CLI-options] tps-audit-event-find [command-options]
This command list all the audit events which are enabled/disabled.

pki-server [CLI-options] tps-audit-event-enable [command-options] event-ID
This command will enable audit events in the TPS.

pki-server [CLI-options] tps-audit-event-disable [command-options] event-ID
This command will disable audit events in the TPS.

pki-server [CLI-options] tps-audit-event-modify [command-options] event-ID
This command will modify the event filter for audit events.

pki-server [CLI-options] tps-audit-file-find [command-options]
This command lists audit log files generated by the TPS.

pki-server [CLI-options] tps-audit-file-verify [command-options]
This command will verify whether the signatures in the audit log files are valid.

AUDIT EVENTS¶

Logging audit events:

• AUDIT_LOG_STARTUP
• AUDIT_LOG_SHUTDOWN
• AUDIT_LOG_DELETE
• LOG_PATH_CHANGE
• LOG_EXPIRATION_CHANGE
• CONFIG_SIGNED_AUDIT

Authentication and authorization audit events:

• AUTHZ
• AUTH
• ROLE_ASSUME
• CONFIG_AUTH
• CONFIG_ROLE
• ACCESS_SESSION_ESTABLISH
• ACCESS_SESSION_TERMINATED

Key audit events:

• PRIVATE_KEY_ARCHIVE_REQUEST
• PRIVATE_KEY_ARCHIVE_REQUEST_PROCESSED
• PRIVATE_KEY_EXPORT_REQUEST_PROCESSED_SUCCESS
• CONFIG_TRUSTED_PUBLIC_KEY
• PRIVATE_KEY_EXPORT_REQUEST_PROCESSED_FAILURE
• KEY_RECOVERY_REQUEST
• KEY_RECOVERY_REQUEST_ASYNC
• KEY_RECOVERY_AGENT_LOGIN
• KEY_RECOVERY_REQUEST_PROCESSED
• KEY_RECOVERY_REQUEST_PROCESSED_ASYNC
• KEY_GEN_ASYMMETRIC
• COMPUTE_SESSION_KEY_REQUEST_PROCESSED_SUCCESS
• COMPUTE_SESSION_KEY_REQUEST
• COMPUTE_SESSION_KEY_REQUEST_PROCESSED_FAILURE
• DIVERSIFY_KEY_REQUEST
• DIVERSIFY_KEY_REQUEST_PROCESSED_SUCCESS
• DIVERSIFY_KEY_REQUEST_PROCESSED_FAILURE
• SERVER_SIDE_KEYGEN_REQUEST
• SERVER_SIDE_KEYGEN_REQUEST_PROCESSED_SUCCESS
• SERVER_SIDE_KEYGEN_REQUEST_PROCESSED_FAILURE

CMC audit events:

• CMC_RESPONSE_SENT
• CMC_ID_POP_LINK_WITNESS
• CMC_SIGNED_REQUEST_SIG_VERIFY
• CMC_PROOF_OF_IDENTIFICATION
• CMC_REQUEST_RECEIVED
• CMC_USER_SIGNED_REQUEST_SIG_VERIFY
• PROOF_OF_POSSESSION

Profile audit events:

• CONFIG_CERT_PROFILE
• CONFIG_CRL_PROFILE
• CONFIG_OCSP_PROFILE

Certificate audit events:

• CERT_SIGNING_INFO
• CERT_PROFILE_APPROVAL
• CERT_REQUEST_PROCESSED
• CERT_STATUS_CHANGE_REQUEST
• CERT_STATUS_CHANGE_REQUEST_PROCESSED
• CONFIG_CERT_POLICY
• PROFILE_CERT_REQUEST
• CIMC_CERT_VERIFICATION
• NON_PROFILE_CERT_REQUEST

ACL audit events:

•

CONFIG_ACL

OCSP audit events:

• OCSP_SIGNING_INFO
• OCSP_GENERATION

CRL audit events:

• SCHEDULE_CRL_GENERATION
• DELTA_CRL_PUBLISHING
• CRL_VALIDATION
• CRL_RETRIEVAL
• CRL_SIGNING_INFO
• FULL_CRL_GENERATION
• DELTA_CRL_GENERATION

Authority audit events:

• AUTHORITY_CONFIG
• SECURITY_DOMAIN_UPDATE
• CONFIG_DRM

Selftest audit events:

•

SELFTESTS_EXECUTION

Encryption data audit events:

• CONFIG_ENCRYPTION
• ENCRYPT_DATA_REQUEST
• ENCRYPT_DATA_REQUEST_PROCESSED_SUCCESS
• ENCRYPT_DATA_REQUEST_PROCESSED_FAILURE
• COMPUTE_RANDOM_DATA_REQUEST
• COMPUTE_RANDOM_DATA_REQUEST_PROCESSED_FAILURE
• COMPUTE_RANDOM_DATA_REQUEST_PROCESSED_SUCCESS
• SECURITY_DATA_ARCHIVAL_REQUEST

Serial/random number audit events:

• INTER_BOUNDARY
• CONFIG_SERIAL_NUMBER
• RANDOM_GENERATION

AUTHORS¶

Amol Kahat <akahat@redhat.com>.

COPYRIGHT¶

Copyright (c) 2018 Red Hat, Inc. This is licensed under the GNU General Public License, version 2 (GPLv2). A copy of this license is available at ⟨http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt⟩.