show-code-trust

show-codetrust
[-b value | --bootstrap-config=value]
[-t value | --tool-password=value]
[-x <true|false> | --expand-groups=<true|false>]

Overview

Use this command to create reports about the code trust on the sever.

The output is gathered in a directory within the logs directory. The path is shown in the console when the command is run. You can open the resulting files in Spotfire clients. They have headers that explain what is displayed in the different columns.

blocked_extcert.csv: lists the blocked external certificates (from a certificate authority).
blocked_hashes.csv: lists the blocked hashes.
blocked_users.csv: lists the blocked users.
revoked_certs.csv: lists the revoked certificates.
byextcert.csv: lists the principals (users and groups) that trust external certificates.
byhash.csv: lists the principals that trust the hash.
Note: Groups currently cannot trust hashes, so these columns are empty.
byuser.csv: lists the principals that trust signatures done by a certain user.

This command might take some time to run (especially when expanding groups to show their members). Also, you might need to increase the Java memory allocation to run the command.

Options


Option	Optional or Required	Default Value	Description
`-b value --bootstrap-config=value`	Optional	none	The path to the bootstrap configuration file. See Bootstrap.xml file for more information about this file.
`-t value --tool-password=value`	Optional	none	The configuration tool password used to decrypt the database password in the file bootstrap.xml. If the tool password is omitted, the command prompts the user for it in the console. See Bootstrap.xml file help topic for more information.
`-x <true\|false> --expand-groups=<true\|false>`	Optional	false	Specifies whether groups should be expanded to show their users.