smallstep_full_white

step certificate install

Name

step certificate install -- install a root certificate in the supported trust stores

Usage

step certificate install <crt-file>
[--prefix=<name>] [--all]
[--java] [--firefox] [--no-system]

Description

step certificate install installs a root certificate in the supported trust stores.

Java's and Firefox's trust stores are also supported via the respective flags

Positional arguments

crt-file Root certificate to install in the specified trust stores.

Options

--prefix=name The prefix used to name the CA in the trust store. Defaults to the certificate common name.

--java install on the Java key store

--firefox install on the Firefox NSS security database

--no-system disables the install on the system's default trust store

--all install in Firefox's, Java's, and the system's default trust store

Examples

Install a root certificate in the system's default trust store:

$ step certificate install root-ca.pem

Install a root certificate in all the supported trust stores:

$ step certificate install --all root-ca.pem

Install a root certificate in Firefox's and the system's default trust store:

$ step certificate install --firefox root-ca.pem

Install a root certificate in Java's and the system's default trust store:

$ step certificate install --java root-ca.pem

Install a root certificate in Firefox's and Java's trust store, but not in the system's default trust store:

$ step certificate install --firefox --java --no-system root-ca.pem