pki-audit man page

pki-audit — Command-Line Interface for managing Certificate System audit configuration.

Synopsis

pki [CLI options] <subsystem>-audit
pki [CLI options] <subsystem>-audit-show [command options]
pki [CLI options] <subsystem>-audit-mod --action <action> [command options]
pki [CLI options] <subsystem>-audit-mod --input <input file> [command options]

Description

The pki-audit commands provide command-line interfaces to manage audit configuration in the specified subsystem. Currently the only supported subsystem is tps.

pki [CLI options] <subsystem>-audit

This command is to list the available audit commands for the subsystem.

pki [CLI options] <subsystem>-audit-show [command options]

This command is to show the audit configuration in the subsystem.

pki [CLI options] <subsystem>-audit-mod --action <action> [command options]

This command is to change the audit (enabled/disabled) status in the subsystem.

pki [CLI options] <subsystem>-audit-mod --input <input file> [command options]

This command is to modify the audit configuration in the subsystem.

Options

The CLI options are described in pki(1).

Operations

To view available audit commands, type pki <subsystem>-audit. To view each command's usage, type pki <subsystem>-audit-<command> --help.

All audit commands must be executed with the subsystem's admin authentication (the user must be in the Administrators group). See also the Authentication section in pki(1).

Viewing audit configuration

To view the audit configuration in TPS execute the following command:

pki <TPS admin authentication> tps-audit-show

To download the audit configuration from TPS into a file execute the following command:

pki <TPS admin authentication> tps-audit-show --output <output file>

Changing audit status

To enable/disable audit in TPS, execute the following command:

pki <TPS admin authentication> tps-audit-mod --action <action>

where action is enable or disable.

Modifying audit configuration

To modify the audit configuration in TPS, download the current configuration using the above tps-audit-show command, edit the file, then execute the following command:

pki <TPS admin authentication> tps-audit-mod --input <input file>

Optionally, a --output <output file> option may be specified to download the effective configuration after the modification.

Authors

Endi S. Dewata <edewata@redhat.com>.

See Also

pki(1)

Info

Jun 30, 2015 version 10.2 PKI Audit Management Commands