User certificates

CLI Guide | Forcepoint Appliances | v8.5.x

Certificates can be assigned to custom users who will be using the appliance's API and do not wish to use password authentication. Neither the default appliance users (admin and audit) nor FSAM/SSO users can be assigned certificates.

show certificate

List the user certificate.

show certificate [--level <ca|user>] [--user <string>]


Parameter	Description
level	(Optional if used with user parameter) Level of certificate; CA or user. Choose ca for intermediate or root certificates, or user for client certificates. If not specified, all types display.
user	(Optional) User name for which to show the certificate.

Command modes

All products.

Usage guidelines

The level parameter is optional if used with the user parameter. Choose ca for intermediate or root certificates, or user for client certificates. If not specified, all types display.

Examples

(view)# show certificate --level ca

Related commands


Command	Description
load certificate	Load a certificate from the filestore to the appliance, or optionally rename an existing certificate.
delete certificate	Delete a certificate on the appliance.

load certificate

Load a certificate from the filestore to the appliance, or optionally rename an existing certificate.

load certificate [--level <ca|user>] --location <filestore_alias> --url <certificate_url> [--auth-required] [--no-cert-verification] --name <string> [--new_name <string>] [--user <string>]


Parameter	Description
level	(Optional) Level of certificate; CA or user. Choose ca for intermediate or root certificates, or user for client certificates. If not specified, all types display.
location	(Optional) Filestore where the certificate is stored.
url	(Optional) URL of the certificate to load, if adding the certificate from a URL rather than from a filestore. Format: <url type>://<user>@<ip or hostname>/filepath
auth-required	(Optional) Used with the url parameter to specify whether a password is needed.
no-cert-verification	(Optional) Used with the url parameter to ignore SSL certificate checks. Only valid with HTTPS.
name	(Optional) Name of the certificate on the filestore.
new_name	(Optional) New name of the certificate when it is loaded onto the appliance.
user	(Optional) Used with the level parameter to specify the user name associated with the certificate.

Command modes

All products.

Examples

(config)# load certificate --location clmftp --name cert.crt --new_name clm.cert

Related commands


Command	Description
show certificate	List the user certificates.
delete certificate	Delete a certificate on the appliance.

delete certificate

Delete a certificate on the appliance.

delete certificate [--name <cert_name>] [--level <ca|user>]


Parameter	Description
name	(Optional) Name of the certificate on the appliance.
level	(Optional) Level of the certificate; CA or user. Choose ca for intermediate or root certificates, or user for client certificates. If not specified, all types display.

Command modes

All products.

Examples

(config)# delete certificate --name clm.cert

Related commands


Command	Description
show certificate	List the user certificates.
load certificate	Load a certificate from the filestore to the appliance, or optionally rename an existing certificate.