6.0.3

Option Description
--status
Required to check the status of a certicate.
--cert <certfile>
Optional name of the conguration le. Defaults to
certool.cfg.
--server <server>
Optional name of the VMCA server. By default, the
command uses localhost.
Example:
certool --status --cert=<filename>
certool --genselfcacert
Generates a self-signed certicate based on the values in the conguration le. This command generates a
certicate that is predated by three days to avoid time zone conicts.
Option Description
--genselfcacert
Required for generating a self-signed certicate.
--outcert <cert_file>
Name of the certicate le. This le must be in PEM
encoded format.
--outprivkey <key_file>
Name of the private key le. This le must be in PEM
encoded format.
--config <config_file>
Optional name of the conguration le. Defaults to
certool.cfg.
Example:
certool --genselfcert --privkey=<filename> --cert=<filename>
vecs-cli Command Reference
The vecs-cli command set allows you to manage VMware Certicate Store (VECS) instances. Use these
commands together with dir-cli and certool to manage your certicate infrastructure.
vecs-cli store create
Creates a certicate store.
Option Description
--name <name>
Name of the certicate store.
Example:
vecs-cli store create --name <store>
vecs-cli store delete
Deletes a certicate store. You cannot delete certicate stores that are predened by the system.
Option Description
--name <name>
Name of the certicate store to delete.
Example:
vecs-cli store delete --name <store>
Chapter 3 vSphere Security Certificates
VMware, Inc. 125