Download Red Hat Certificate System 8.1 Command

Chapter 25. tpsclient (D ebugging the TPS)
op.format.tokenKey.update.symmetricKeys.enable=true
op.format.tokenKey.update.symmetricKeys.requiredVersion=2
T his setting instructs the T PS to upgrade the token from version 1 to version 2 during the
tpsclient format operation.
3. Format the token using tpsclient, as follows:
tpsclient
Command>op=token_set
key_info=0101
Command>op=token_set
Command>op=token_set
Command>op=token_set
cuid=a00192030405060708c9 app_ver=6FBBC105
auth_key=404142434445464748494a4b4c4d4e4f
mac_key=404142434445464748494a4b4c4d4e4f
kek_key=404142434445464748494a4b4c4d4e4f
Command>op=ra_format uid=jsmith pwd=password num_threads=1 new_pin=password
T he CUID can be any 10-byte string; it affects how the T KS computes the new key set for
tpsclient.
TIP
Because it can be tedious to type each operation and parameter through the command line,
it is possible to create an input file and then point the tpsclient command to the file. For
example:
tpsclient < /tmp/input.txt
Example 25.1, “Example tpsclient Enrollment Input File” and Example 25.2, “Example
tpsclient Format Input File” both list examples for an input file.
T he command prompt will return any output given by tpsclient during the operation and
the final result of the command.
4. After running the format operation, tpsclient prints the new key set in the standard output.
Save the new values in a new tpsclient input file. T he input file can then be used with a
production T PS server.
tpsclient can be used for formatting operations or for enrollment operations. T he sample input file for
an enrollment operation is shown in Example 25.1, “Example tpsclient Enrollment Input File”.
Example 25.1. Example tpsclient Enrollment Input File
op=var_set name=ra_host value=server.example.com
op=var_set name=ra_port value=7888
op=var_set name=ra_uri value=/nk_service
op=token_set cuid=00000000000000000001
msn=01020304 app_ver=6FBBC105 key_info=0101 major_ver=0 minor_ver=0
op=token_set auth_key=404142434445464748494a4b4c4d4e4f
op=token_set mac_key=404142434445464748494a4b4c4d4e4f
op=token_set kek_key=404142434445464748494a4b4c4d4e4f
op=ra_enroll uid=jdoe pwd=password new_pin=password num_threads=1
113