System information

CMC Enrollment

The CMC Enrollment utility, CMCEnroll, is used to sign a certificate request with an agent's

certificate. This can be used in conjunction with the CA end-entity CMC Enrollment form to sign

and enroll certificates for users.

1. Syntax

This utility has the following syntax:

CMCEnroll -d directory_containing_agent_cert -h db_password -n

certificate_nickname

-r certificate_request_file -p certificate_DB_passwd [-c comment]

Option Description

d The directory containing the cert8.db,

key3.db, and secmod.db files associated with

the agent certificate.

h Password to the directory specified in the d

option.

n The nickname of the certificate.

r The filename of the certificate request.

p The password to the browser certificate

database.

c Optional. Includes comments about the

request.

Table 13.1.

NOTE

Surround values that include spaces with quotation marks.

2. Usage

Signed requests must be submitted to the CA, either by sending them directly to the Certificate

Authority or by using the CA agent page. Certificate System provides a Certificate Authority

Certificate Enrollment form called CMCEnrollment.html. The default configuration of this form

does not include the necessary field to paste an enrollment request. To use this form to submit

Chapter 13.