Editing Certificate Profile

Editing Certificate Profile Remotely

Note: A certificate profile must be disabled before it can be modified. Once the modification is complete, the profile can be reenabled.

For convenience, a certificate profile can be visually edited in raw format (without exporting and reimporting the configuration file) with the following command:

$ pki -n caadmin ca-profile-edit <profile ID>

This command will automatically download the profile configuration in raw format and open it with the default text editor. To use a specific editor:

$ EDITOR=<editor> pki -n caadmin ca-profile-edit <profile ID>

When the editor is closed, the edited profile configuration will be used to update the profile on the server.

Editing Certificate Profile Locally

If the profiles are stored in local files (instead of in LDAP), the files can be edited directly, but the server must be restarted before the changes will take effect.