pki-server-tps(8)

📦
version 11.9.0 · 3 versions
, in fedora 43, fedora 44

💖 NAME 💖

okay so <pink>pki-server-tps</pink> — that's the Command-Line Interface for managing PKI TPS. it lives in the pki-server-tps(8) manual, which the header calls PKI TPS Management Commands. bestie, this is your group chat with the TPS 💅

✨ SYNOPSIS ✨

no cap, here's every single way you can call it:

pki-server [CLI-options] tps-clone-prepare [command-options]
pki-server [CLI-options] tps-db-vlv-find [command-options]
pki-server [CLI-options] tps-db-vlv-add [command-options]
pki-server [CLI-options] tps-db-vlv-del [command-options]
pki-server [CLI-options] tps-db-vlv-reindex [command-options]
pki-server [CLI-options] tps-audit-event-find [command-options]
pki-server [CLI-options] tps-audit-event-enable [command-options] event-ID
pki-server [CLI-options] tps-audit-event-modify [command-options] event-ID
pki-server [CLI-options] tps-audit-event-disable [command-options] event-ID
pki-server [CLI-options] tps-audit-file-find [command-options]
pki-server [CLI-options] tps-audit-file-verify [command-options]

see how event-ID keeps getting split across lines in the raw page? yeah. we fixed the vibe, not the facts 🫶

🌸 DESCRIPTION 🌸

the <purple>pki-server tps</purple> commands are basically the command-line interfaces to manage PKI TPS. that's the whole assignment. let's go one by one, no skipping, we do not gatekeep 🎀

fun fact: the raw page has a literal .SH DESCRIPTION line just vibing in the middle of this section before the text starts. iconic typo energy, we're keeping it because rules are rules 💀
  • pki-server [CLI-options] tps [command-options] — this one lists all the available PKI TPS management commands. it's giving table of contents ✨
  • pki-server [CLI-options] tps-clone-prepare [command-options] — this command exports TPS system certificates into a PKCS #12 file with private keys. packing your bags for a clone, slay 🧳
  • pki-server [CLI-options] tps-db-vlv-find [command-options] — lists the VLV records for TPS.
  • pki-server [CLI-options] tps-db-vlv-add [command-options] — adds VLV records for TPS.
  • pki-server [CLI-options] tps-db-vlv-del [command-options] — deletes VLV records for TPS.
  • pki-server [CLI-options] tps-db-vlv-reindex [command-options] — reindexes VLV records for TPS. glow-up for your indexes 💅
  • pki-server [CLI-options] tps-audit-event-find [command-options] — lists all the audit events which are enabled/disabled.
  • pki-server [CLI-options] tps-audit-event-enable [command-options] event-ID — enables audit events in the TPS. taking event-ID as its argument.
  • pki-server [CLI-options] tps-audit-event-disable [command-options] event-ID — disables audit events in the TPS. also takes event-ID.
  • pki-server [CLI-options] tps-audit-event-modify [command-options] event-ID — modifies the event filter for audit events. yep, event-ID again.
  • pki-server [CLI-options] tps-audit-file-find [command-options] — lists the audit log files generated by the TPS.
  • pki-server [CLI-options] tps-audit-file-verify [command-options] — verifies whether the signatures in the audit log files are valid. vibe check on your signatures 🔥

🌈 AUDIT EVENTS 🌈

here's the full roster of audit events, sorted by category, zero skips, we eat the whole plate 🍓

🎀 Logging audit events

  • AUDIT_LOG_STARTUP
  • AUDIT_LOG_SHUTDOWN
  • AUDIT_LOG_DELETE
  • LOG_PATH_CHANGE
  • LOG_EXPIRATION_CHANGE
  • CONFIG_SIGNED_AUDIT

🔐 Authentication and authorization audit events

  • AUTHZ
  • AUTH
  • ROLE_ASSUME
  • CONFIG_AUTH
  • CONFIG_ROLE
  • ACCESS_SESSION_ESTABLISH
  • ACCESS_SESSION_TERMINATED

🗝️ Key audit events

  • PRIVATE_KEY_ARCHIVE_REQUEST
  • PRIVATE_KEY_ARCHIVE_REQUEST_PROCESSED
  • PRIVATE_KEY_EXPORT_REQUEST_PROCESSED_SUCCESS
  • CONFIG_TRUSTED_PUBLIC_KEY
  • PRIVATE_KEY_EXPORT_REQUEST_PROCESSED_FAILURE
  • KEY_RECOVERY_REQUEST
  • KEY_RECOVERY_REQUEST_ASYNC
  • KEY_RECOVERY_AGENT_LOGIN
  • KEY_RECOVERY_REQUEST_PROCESSED
  • KEY_RECOVERY_REQUEST_PROCESSED_ASYNC
  • KEY_GEN_ASYMMETRIC
  • COMPUTE_SESSION_KEY_REQUEST_PROCESSED_SUCCESS
  • COMPUTE_SESSION_KEY_REQUEST
  • COMPUTE_SESSION_KEY_REQUEST_PROCESSED_FAILURE
  • DIVERSIFY_KEY_REQUEST
  • DIVERSIFY_KEY_REQUEST_PROCESSED_SUCCESS
  • DIVERSIFY_KEY_REQUEST_PROCESSED_FAILURE
  • SERVER_SIDE_KEYGEN_REQUEST
  • SERVER_SIDE_KEYGEN_REQUEST_PROCESSED_SUCCESS
  • SERVER_SIDE_KEYGEN_REQUEST_PROCESSED_FAILURE

💌 CMC audit events

  • CMC_RESPONSE_SENT
  • CMC_ID_POP_LINK_WITNESS
  • CMC_SIGNED_REQUEST_SIG_VERIFY
  • CMC_PROOF_OF_IDENTIFICATION
  • CMC_REQUEST_RECEIVED
  • CMC_USER_SIGNED_REQUEST_SIG_VERIFY
  • PROOF_OF_POSSESSION

👑 Profile audit events

  • CONFIG_CERT_PROFILE
  • CONFIG_CRL_PROFILE
  • CONFIG_OCSP_PROFILE

📜 Certificate audit events

  • CERT_SIGNING_INFO
  • CERT_PROFILE_APPROVAL
  • CERT_REQUEST_PROCESSED
  • CERT_STATUS_CHANGE_REQUEST
  • CERT_STATUS_CHANGE_REQUEST_PROCESSED
  • CONFIG_CERT_POLICY
  • PROFILE_CERT_REQUEST
  • CIMC_CERT_VERIFICATION
  • NON_PROFILE_CERT_REQUEST

🚪 ACL audit events

  • CONFIG_ACL

🦋 OCSP audit events

  • OCSP_SIGNING_INFO
  • OCSP_GENERATION

🧚 CRL audit events

  • SCHEDULE_CRL_GENERATION
  • DELTA_CRL_PUBLISHING
  • CRL_VALIDATION
  • CRL_RETRIEVAL
  • CRL_SIGNING_INFO
  • FULL_CRL_GENERATION
  • DELTA_CRL_GENERATION

🏛️ Authority audit events

  • AUTHORITY_CONFIG
  • SECURITY_DOMAIN_UPDATE
  • CONFIG_DRM

🧪 Selftest audit events

  • SELFTESTS_EXECUTION

🔒 Encryption data audit events

  • CONFIG_ENCRYPTION
  • ENCRYPT_DATA_REQUEST
  • ENCRYPT_DATA_REQUEST_PROCESSED_SUCCESS
  • ENCRYPT_DATA_REQUEST_PROCESSED_FAILURE
  • COMPUTE_RANDOM_DATA_REQUEST
  • COMPUTE_RANDOM_DATA_REQUEST_PROCESSED_FAILURE
  • COMPUTE_RANDOM_DATA_REQUEST_PROCESSED_SUCCESS
  • SECURITY_DATA_ARCHIVAL_REQUEST

⭐ Serial/random number audit events

  • INTER_BOUNDARY
  • CONFIG_SERIAL_NUMBER
  • RANDOM_GENERATION

🫶 AUTHORS 🫶

Amol Kahat <akahat@redhat.com>. periodt, credit where credit is due 💜

Copyright (c) 2018 Red Hat, Inc. This is licensed under the GNU General Public License, version 2 (GPLv2). A copy of this license is available at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.

fr fr, read the license, it's giving responsible main character energy 📖

okay bestie that's the whole page, no gatekeeping, every single event accounted for 😭✨ and for the cute sign-off: this whole thing is brought to you by PKI, dated Mar 21, 2018, and yes the manual name at the bottom is pki-server-tps(8) — go forth and manage those TPS, you absolute icon 👑💅

📦 where this page comes from