Share via


az trustedsigning certificate-profile

Note

This reference is part of the trustedsigning extension for the Azure CLI (version 2.57.0 or higher). The extension will automatically install the first time you run an az trustedsigning certificate-profile command. Learn more about extensions.

Command group 'az trustedsigning' is in preview and under development. Reference and support levels: https://aka.ms/CLI_refstatus

Manage certificate profiles under a trusted signing account.

Commands

Name Description Type Status
az trustedsigning certificate-profile create

Create a certificate profile.

Extension Preview
az trustedsigning certificate-profile delete

Delete a certificate profile.

Extension Preview
az trustedsigning certificate-profile list

List certificate profiles under a trusted signing account.

Extension Preview
az trustedsigning certificate-profile show

Get details of a certificate profile.

Extension Preview
az trustedsigning certificate-profile wait

Place the CLI in a waiting state until a condition is met.

Extension Preview

az trustedsigning certificate-profile create

Preview

Command group 'az trustedsigning certificate-profile' is in preview and under development. Reference and support levels: https://aka.ms/CLI_refstatus

Create a certificate profile.

az trustedsigning certificate-profile create --account-name
                                             --name
                                             --resource-group
                                             [--identity-validation-id]
                                             [--include-city {0, 1, f, false, n, no, t, true, y, yes}]
                                             [--include-country {0, 1, f, false, n, no, t, true, y, yes}]
                                             [--include-postal-code {0, 1, f, false, n, no, t, true, y, yes}]
                                             [--include-state {0, 1, f, false, n, no, t, true, y, yes}]
                                             [--include-street-address {0, 1, f, false, n, no, t, true, y, yes}]
                                             [--no-wait {0, 1, f, false, n, no, t, true, y, yes}]
                                             [--profile-type {PrivateTrust, PrivateTrustCIPolicy, PublicTrust, PublicTrustTest, VBSEnclave}]

Examples

Create a certificate profile that includes street address in subject name of certificate

az trustedsigning certificate-profile create -g MyResourceGroup --account-name MyAccount -n MyProfile --profile-type PublicTrust --identity-validation-id xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx --include-street true

Required Parameters

--account-name

Trusted Signing account name.

--name --profile-name -n

Certificate profile name.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Optional Parameters

--identity-validation-id

Identity validation id used for the certificate subject name.

--include-city

Whether to include L in the certificate subject name. Applicable only for private trust, private trust ci profile types.

Accepted values: 0, 1, f, false, n, no, t, true, y, yes
Default value: False
--include-country

Whether to include C in the certificate subject name. Applicable only for private trust, private trust ci profile types.

Accepted values: 0, 1, f, false, n, no, t, true, y, yes
Default value: False
--include-postal-code

Whether to include PC in the certificate subject name.

Accepted values: 0, 1, f, false, n, no, t, true, y, yes
Default value: False
--include-state

Whether to include S in the certificate subject name. Applicable only for private trust, private trust ci profile types.

Accepted values: 0, 1, f, false, n, no, t, true, y, yes
Default value: False
--include-street-address

Whether to include STREET in the certificate subject name.

Accepted values: 0, 1, f, false, n, no, t, true, y, yes
Default value: False
--no-wait

Do not wait for the long-running operation to finish.

Accepted values: 0, 1, f, false, n, no, t, true, y, yes
--profile-type

Profile type of the certificate.

Accepted values: PrivateTrust, PrivateTrustCIPolicy, PublicTrust, PublicTrustTest, VBSEnclave
Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az trustedsigning certificate-profile delete

Preview

Command group 'az trustedsigning certificate-profile' is in preview and under development. Reference and support levels: https://aka.ms/CLI_refstatus

Delete a certificate profile.

az trustedsigning certificate-profile delete [--account-name]
                                             [--ids]
                                             [--name]
                                             [--no-wait {0, 1, f, false, n, no, t, true, y, yes}]
                                             [--resource-group]
                                             [--subscription]
                                             [--yes]

Examples

Delete a certificate profile

az trustedsigning certificate-profile delete -g MyResourceGroup --account-name MyAccount -n MyProfile

Optional Parameters

--account-name

Trusted Signing account name.

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--name --profile-name -n

Certificate profile name.

--no-wait

Do not wait for the long-running operation to finish.

Accepted values: 0, 1, f, false, n, no, t, true, y, yes
--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--yes -y

Do not prompt for confirmation.

Default value: False
Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az trustedsigning certificate-profile list

Preview

Command group 'az trustedsigning certificate-profile' is in preview and under development. Reference and support levels: https://aka.ms/CLI_refstatus

List certificate profiles under a trusted signing account.

az trustedsigning certificate-profile list --account-name
                                           --resource-group
                                           [--max-items]
                                           [--next-token]

Examples

Lists certificate profile under a trusted signing account

az trustedsigning certificate-profile list -g MyResourceGroup --account-name MyAccount

Required Parameters

--account-name

Trusted Signing account name.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Optional Parameters

--max-items

Total number of items to return in the command's output. If the total number of items available is more than the value specified, a token is provided in the command's output. To resume pagination, provide the token value in --next-token argument of a subsequent command.

--next-token

Token to specify where to start paginating. This is the token value from a previously truncated response.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az trustedsigning certificate-profile show

Preview

Command group 'az trustedsigning certificate-profile' is in preview and under development. Reference and support levels: https://aka.ms/CLI_refstatus

Get details of a certificate profile.

az trustedsigning certificate-profile show [--account-name]
                                           [--ids]
                                           [--name]
                                           [--resource-group]
                                           [--subscription]

Examples

Get details of a profile

az trustedsigning certificate-profile show -g MyResourceGroup --account-name MyAccount -n MyProfile

Optional Parameters

--account-name

Trusted Signing account name.

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--name --profile-name -n

Certificate profile name.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az trustedsigning certificate-profile wait

Preview

Command group 'az trustedsigning certificate-profile' is in preview and under development. Reference and support levels: https://aka.ms/CLI_refstatus

Place the CLI in a waiting state until a condition is met.

az trustedsigning certificate-profile wait [--account-name]
                                           [--created]
                                           [--custom]
                                           [--deleted]
                                           [--exists]
                                           [--ids]
                                           [--interval]
                                           [--name]
                                           [--resource-group]
                                           [--subscription]
                                           [--timeout]
                                           [--updated]

Optional Parameters

--account-name

Trusted Signing account name.

--created

Wait until created with 'provisioningState' at 'Succeeded'.

Default value: False
--custom

Wait until the condition satisfies a custom JMESPath query. E.g. provisioningState!='InProgress', instanceView.statuses[?code=='PowerState/running'].

--deleted

Wait until deleted.

Default value: False
--exists

Wait until the resource exists.

Default value: False
--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--interval

Polling interval in seconds.

Default value: 30
--name --profile-name -n

Certificate profile name.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--timeout

Maximum wait in seconds.

Default value: 3600
--updated

Wait until updated with provisioningState at 'Succeeded'.

Default value: False
Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.