安全な認証情報のセットアップ - Windows
[en] Windows credential Manager improves security by securely storing login credentials in an encrypted vault, protecting them from unauthorized access. Strengthen the security of your API key and client authentication certificate password by storing them in Windows Credential Manager.
[en] Once your credentials are stored, all DigiCert® KeyLocker client tools can pull your credentials from Windows Credential Manager.
Save your API key and client authentication certificate password
To save your API key and Client authentication certificate to Windows Credential Manager, follow these steps:
Open a command prompt.
Run the following command, replacing <API Key> and <Client authentication certificate password> with your actual credentials:
smctl credentials save <API key> <Client authentication certificate password>
You can use this command any number of times to overwrite the credentials stored.
Set Host and Client authentication certificate path
[en] Once your API key and client authentication certificate password is securely stored in the properties file or Windows Credential Manager, use the following command to set the remaining environment variables in SMCTL:
set SM_HOST=<host URL> set SM_CLIENT_CERT_FILE=<P12 client authentication certificate file path>
[en] Proxy configuration
[en] Configure the HTTPS_PROXY environment variable if the client tool need to communicate through a proxy.
[en] Anonymous proxy
[en] Use this command if your proxy does not require authentication:
注記
Regarding the use of https:// in the following command:
Using https:// will not list keypairs.
Not using https:// will list keypairs.
set HTTPS_PROXY=https://<proxy_host>:<proxy_port>
[en] Authenticated proxy
[en] Use this command if your proxy requires authentication:
set HTTPS_PROXY=user:password@<proxy_host>:<proxy_port>
Windows Credential ManagerでのDigiCert® Software Trust Manager認証情報の管理
If you need to delete credentials saved in the Windows Credential Manager, run the following command in SMCTL:
smctl credentials delete