Creating a Certificate Store

certapp helps you create certificate stores. The following is an example for creating a certificate store.

Steps

1. Create a configuration file, certclients.txt, which maps application name text strings to application UIDs.

   Make sure that only one application name maps to a UID. Note: Although no error is displayed when you map more than one application name to a UID, this is not recommended. The following is an example of a configuration file:

   StartClientInfo
       # Entry 1
           Uid 0x100042ab
           Name "SW Install"
       # Entry 2
           Uid 0x1000a8b6
           Name "SW Install OCSP Signing"
   EndClientInfo
   

2. Convert certclients.txt to a binary file using the following command:

   > certapp --hcertclients=certclients.txt --out --bcertclients=certclients.dat

3. Generate the file certificate store (cacerts.dat) and SWI certificate store (swicertstore.dat) files.

   > certapp --hcertclients=certclients.txt --hfilecertstore=cacerts.txt --out --bfilecertstore=cacerts.dat

   > certapp --hcertclients=certclients.txt --hswicertstore=swicertstore.txt --out --bswicertstore=swicertstore.dat

   Note: You can use the following command to combine the listed commands into a single command and create a certificate store.

   > certapp --hcertclients=certclients.txt --hfilecertstore=cacerts.txt --hswicertstore=swicertstore.txt --out --bcertclients=certclients.dat --bfilecertstore=cacerts.dat --bswicertstore=swicertstore.dat