6.0.3

Table 3‑6. Stores in VECS (Continued)
Store Description
vSphere Certicate Manager Utility backup store
(BACKUP_STORE)
Used by VMCA (VMware Certicate Manager) to support
certicate revert. Only the most recent state is stored as a
backup, you cannot go back more than one step.
Other stores Other stores might be added by solutions. For example, the
Virtual Volumes solution adds an SMS store. Do not
modify the certicates in those stores unless VMware
documentation or a VMware Knowledge Base artoc;e
instructs you to do so.
N CRLS are not supported in vSphere 6.0
Nevertheless, deleting the TRUSTED_ROOTS_CRLS store
can damage your certicate infrastructure. Do not delete or
modify the TRUSTED_ROOTS_CRLS store.
Example:
vecs-cli store list
vecs-cli store permissions
Grants or revokes permissions to the store. Use either the --grant or the --revoke option.
The owner of the store has all control of its store, including granting and revoking permissions. The
administrator has all privileges on all stores, including granting and revoking permissions.
You can use vecs-cli get-permissions --name <store-name> to retrieve the current seings for the store.
Option Description
--name <name>
Name of the certicate store.
--user <username>
Unique name of the user who is granted permissions.
--grant [read|write]
Permission to grant, either read or write.
--revoke [read|write]
Permission to revoke, either read or write. Not currently
supported.
vecs-cli entry create
Create an entry in VECS. Use this command to add a private key or certicate to a store.
Option Description
--store <NameOfStore>
Name of the certicate store.
--alias <Alias>
Optional alias for the certicate. This option is ignored for
the trusted root store.
--cert <certificate_file_path>
Full path of the certicate le.
--key <key-file-path>
Full path of the key that corresponds to the certicate.
Optional.
vecs-cli entry list
List all entries in a specied store.
Chapter 3 vSphere Security Certificates
VMware, Inc. 127