Installing certificates with upcerins

To install a certificate on UNIX, you use the sdk_installdir/bin/upcerins utility. This utility uses a private key file and a saved email message or other file containing a certificate.

To install a certificate, follow these steps:

1. Make sure the UP.SDK bin directory is in your path and that the UPSDK environment variable is set.

For more information, see Steps 1 and 2 in Requesting certificates with upcerreq.

2. Make sure you know where the certificate response file and the associated private key file are.

The certificate response file is the file containing the certificate response email from the Certificate Authority. The private key file is the file you specified with the -p option when you ran the upcerreq utility (see Step 4 in Requesting certificates with upcerreq).

3. Run the certificate installation utility.

The utility has the following options:

upcerins -i input_certificate_file
    [-p private_key_file]
    [-o output_certificate_file] [-h]

Option	Description
-i input_certificate_file	Specify the file containing the saved email message that contains the certificate--the email message the Certificate Authority sent after you called the upcerreq utility to request a certificate.  The utility strips the email headers from the file and extracts the issued certificate.
-p private_key_file	Specify the full path to the file containing the private key. This file is generated by the upcerreq utility.   If you omit this option, and the environment variable UPSDK is defined, upcerins expects the private key file to be located in $UPSDK/config/priv_key.pem.
-o output_certificate_file	Specify a full path to the file in which to install the certificate.   If you omit this option, and the UPSDK environment variable is defined, upcerins installs the certificate file in $UPSDK/config/clnt_cer.pem.
-h	Print help text.




For example, if you saved the email containing the certificate to $UPSDK/bin/cmail.txt and the private key to $UPSDK/config/priv_key.pem, type:

upcerins -i $UPSDK/bin/cmail.txt


This command will save the certificate file to $UPSDK/config/clnt_cer.pem.

The upcerins utility prompts you for a password.

4. Enter the password you specified when you generated the certificate request (see Step Step 5 in Requesting certificates with upcerreq).

The upcerins utility parses the input certificate file and extracts the issued certificate from the mail message body. It then inserts the private key into the certificate and installs the results in the specified output certificate file. When you use UP.SDK tools and APIs to send notifications, you specify the filename of this certificate file.