Skip past navigation linksSecure Global Desktop Administration Guide > Commands > The tarantella security command

The tarantella security command

Syntax

Skip past command syntax or program codetarantella security certinfo | certrequest | certuse |
                    customca | decryptkey | fingerprint | peerca | start | stop

Description

Controls Secure Global Desktop security services and manages X.509 certificates.

Option Description
certinfo Displays information about an X.509 certificate or Certificate Signing Request (CSR), and optionally checks whether a specified private key matches the public key contained in a particular certificate.
certrequest Creates a Certificate Signing Request (CSR) (and a corresponding key pair) which you use to obtain an X.509 certificate for use with Secure Global Desktop security services.
certuse Installs an X.509 certificate (or specifies the location of an installed certificate) for use with Secure Global Desktop security services.
customca Installs a root certificate for a custom Certificate Authority for use with Secure Global Desktop security services.
decryptkey Decrypts an encrypted private key so that you can use it with Secure Global Desktop.
fingerprint Displays the fingerprint of the X.509 certificate installed on this host.
peerca Shows, imports or exports the primary server's CA certificate used for secure intra-array communication.
start Enables secure (SSL) connections. Users who require secure connections are given them.
stop Disables secure (SSL) connections. Users configured for secure connections are given standard connections instead.

Note All commands allow the --help option: you can use tarantella security subcommand --help to get help on a specific command.

Examples

Skip past command syntax or program codetarantella security certinfo \
  --csrfile /tmp/boston.csr

Displays information about the CSR in /tmp/boston.csr.

Skip past command syntax or program codetarantella security decryptkey \
  --enckey /opt/keys/key1 \
  --deckey /opt/keys/key2 \
  --format DER

Decrypts the key /opt/keys/key1 (which is stored in DER format), placing the decrypted key in /opt/keys/key2.

Related topics