[Contents] [Index]

About This Document >>     Installing SSH Tectia Server for IBM z/OS >>     Getting Started with SSH Tectia Server for IBM z/OS >>     Configuring the Server >>     Configuring the Client >>     Authentication >>     File Transfer Using SFTP >>     File Transfer Using Transparent FTP Tunneling >>     Tunneling on the Command Line >>     Troubleshooting SSH Tectia Server for IBM z/OS >>     Advanced Information >>     Man Pages >>         scp2         sftp2         ssh-add2         ssh-agent2         ssh-socks-proxy >>         ssh-socks-proxy-config >>         ssh-socks-proxy-ctl >>         ssh-certd         ssh_certd_config         ssh-certview >>         ssh-cmpclient >>             Synopsis             Description             Commands             Options             Examples         ssh-dummy-shell         ssh-ekview         ssh-externalkeys         ssh-keydist2 >>         ssh-keygen2         ssh-probe2         ssh-scepclient >>         ssh-sft-stage         ssh2         ssh2_config         sshd-check-conf         sshd2         sshd2_config         sshd2_subconfig         sshregex     Log Messages >>

Synopsis

The usage of the CMP client is the following:

ssh-cmpclient command [options] access [name] Where command is one of the following: INITIALIZE psk|racerts keypair template ENROLL certs|racerts keypair template UPDATE certs [keypair] POLL psk|certs|racerts id RECOVER psk|certs|racerts template REVOKE psk|certs|racerts template TUNNEL racerts template Most commands can accept the following options: -B Perform key backup for subject keys. -o prefix Save result into files with prefix. -O filename Save the result into the specified file. If there is more than one result file, the remaining results are rejected. -C file CA certificate from this file. -S url Use this SOCKS server to access the CA. -H url Use this HTTP proxy to access the CA. -E PoP by encryption (CA certificate needed). -v num Protocol version 1|2 of the CA platform. Default is 2. -y Non-interactive mode. All questions answered with 'y'. -N file Specifies a file to stir to the random pool. -Z provspec Specifies the external key provider for private key. The format of provspec is "providername:initstring". The following identifiers are used to specify options: psk -p refnum:key (reference number and pre-shared key) -p file (containing refnum:key) -i number (iteration count, default 1024) certs -c file (certificate file) -k url (private-key URL) racerts -R file (RA certificate file) -k url (RA private-key URL) keypair -P url (private-key URL) id -I number (polling ID) template -T file (certificate template) -s subject-ldap[;type=value] -u key-usage-name[;key-usage-name] -U extended-key-usage-name[;extended-key-usage-name] access URL where the CA listens for requests. name Directory name for the issuing CA (if -C is not given). Key URLs are either valid external key paths or in the format: "generate://savetype:passphrase@keytype:size/save-file-prefix" "file://passphrase/absolute-key-file-path" "file:/absolute-key-file-path" "file:relative-key-file-path" "any-externalkey-provider-url" (provider-specific) "any-key-file-path" The key generation "savetype" can be: - ssh2, secsh2, secsh (Secure Shell 2 key type) - ssh1, secsh1 (legacy Secure Shell 1 key type) - pkcs1 (PKCS #1 format) - pkcs8s (passphrase-protected PKCS #8, "shrouded PKCS #8") - pkcs8 (plain-text PKCS #8) - x509 (SSH-proprietary X.509 library key type) -h Prints usage message. -F Prints key usage extension and keytype instructions. -e Prints command-line examples.