PKI Server SD CLI

Overview

The pki-server sd-* commands provide a way to manage security domain database directly without a running PKI server. These commands can be used to fix security domain issues.

Creating Security Domain Database

$ pki-server sd-create

Listing Subsystems in Security Domain

$ pki-server sd-subsystem-find

Adding Subsystem into Security Domain

$ pki-server sd-subsystem-add \
    --subsystem CA \
    --hostname pki.example.com \
    --secure-port 8443 \
    "CA pki.example.com 8443"

Removing Subsystem from Security Domain

$ pki-server sd-subsystem-del "CA pki.example.com 8443"