signingclient import certificate


This command is for administrator users only. In a normal scenario, Entrust Certificate Services automatically manages your keys and certificates.

Imports a certificate.

signingclient import certificate <cert_file> [--cert-id <id>] [--cert-label <label>] [--no-trusted] [--log <file>] [--verbose]

See below for the supported options.

<cert_file>

Import the certificate in the <cert_file> file path.

Mandatory: Yes.

--cert-id <id>

Set <id> as the hexadecimal identifier of the certificate.

Mandatory: No. When omitting this option, the identifier is:

  • The public key identifier, if the certificate public key is in the token.

  • The public key SHA1 otherwise.

--cert-label <label>

Set <label> as the certificate label.

When Integrating the PKCS #11 library with third-party applications, the keystore of the third-party application must use the same <label> label to identify the certificate.

Mandatory: No. When omitting this option, the certificate label is the certificate subject.

--log <file>

Record the command execution in a log file with the <file> path.

  • If the file does not exist, the command creates it.

  • If the file exists, the command appends the execution log.

Mandatory: No. When omitting this option, the command does not record a log.

--no-trusted

Set CKA_TRUSTED to false in the certificate flags.

Setting CKA_TRUSTED to false can prevent Java signing applications from working.

Mandatory: No. When omitting this option, CKA_TRUSTED is true.

--verbose

Print additional error information (if any).

Mandatory: No.