step ca root

NAME

step ca root – download and validate the root certificate

USAGE

step ca root root-file [–ca-url=uri] [–fingerprint=fingerprint]

DESCRIPTION

step ca root downloads and validates the root certificate from the certificate authority.

POSITIONAL ARGUMENTS

root-file
File to write root certificate (PEM format)

OPTIONS

–ca-url=URI
URI of the targeted Step Certificate Authority.
–fingerprint=fingerprint
The fingerprint of the targeted root certificate.
-f=value, –force=value
Force the overwrite of files without asking.

EXAMPLES

Get the root fingerprint in the CA:

$ step certificate fingerprint /path/to/root_ca.crt
0d7d3834cf187726cf331c40a31aa7ef6b29ba4df601416c9788f6ee01058cf3

Download the root certificate from the configured certificate authority:

$ step ca root root_ca.crt \
  --fingerprint 0d7d3834cf187726cf331c40a31aa7ef6b29ba4df601416c9788f6ee01058cf3

Download the root certificate using a given certificate authority:

$ step ca root root_ca.crt \
  --ca-url https://ca.smallstep.com:9000 \
  --fingerprint 0d7d3834cf187726cf331c40a31aa7ef6b29ba4df601416c9788f6ee01058cf3