vhsm pki

Learn to manage and interact with the PKI Secrets Engine in vHSM server.

This command allows you to manage and interact with the PKI Secrets Engine in vHSM. It includes functionalities such as checking PKI mount health, issuing certificates, verifying signatures, and managing certificate chains.

Usage

vhsm pki <subcommand> [options] [args]

The vhsm pki command provides subcommands for interacting with vHSM’s PKI Secrets Engine.

For detailed usage of each subcommand, use:

vhsm pki <subcommand> --help

Examples

Check the health of a PKI mount:

vhsm pki health-check pki

Subcommands

Subcommand	Description
health-check	Checks the health and operational status of a PKI Secrets Engine mount.
issue	Generates an issuer on a specified mount using a parent certificate and generation parameters.
list-intermediates	Determines which certificates in a list were issued by a given parent certificate.
reissue	Creates a new issuer on a child mount using a parent certificate and a template certificate.
verify-sign	Checks whether one certificate validates another specified certificate.