gcloud alpha auth enterprise-certificate-config create linux Stay organized with collections Save and categorize content based on your preferences.
- NAME
- gcloud alpha auth enterprise-certificate-config create linux - create an enterprise-certificate configuration file for Linux
- SYNOPSIS
gcloud alpha auth enterprise-certificate-config create linux
--label
=LABEL
--module
=MODULE
--slot
=SLOT
[--ecp
=ECP
][--ecp-client
=ECP_CLIENT
][--output-file
=OUTPUT_FILE
][--tls-offload
=TLS_OFFLOAD
][--user-pin
=USER_PIN
][GCLOUD_WIDE_FLAG …
]
- DESCRIPTION
(ALPHA)
This command creates a configuration file used by gcloud touse the enterprise-certificate-proxy component for mTLS.- EXAMPLES
- To create a credential configuration run:
gcloudalphaauthenterprise-certificate-configcreatelinux--module=$PATH_TO_PKCS11_MODULE--slot=$PKCS11_SLOT_ID--label=$PKCS11_OBJECT_LABEL--user-pin=$PKCS11_USER_PIN
- REQUIRED FLAGS
--label
=LABEL
- The PKCS #11 label for the target credentials. The certificate, public key, andprivate key MUST have the same label. enterprise-certificate-proxy will use allthree objects.
--module
=MODULE
- The full file path to the PKCS #11 module.
--slot
=SLOT
- The PKCS #11 slot containing the target credentials.
- OPTIONAL FLAGS
--ecp
=ECP
- Provide a custom path to the enterprise-certificate-proxy binary. This flag mustbe the full path to the binary.
--ecp-client
=ECP_CLIENT
- Provide a custom path to the enterprise-certificate-proxy shared client library.This flag must be the full path to the shared library.
--output-file
=OUTPUT_FILE
- Override the file path that the enterprise-certificate-proxy configuration iswritten to.
--tls-offload
=TLS_OFFLOAD
- Provide a custom path to the enterprise-certificate-proxy shared tls offloadlibrary. This flag must be the full path to the shared library.
--user-pin
=USER_PIN
- The user pin used to login to the PKCS #11 module. If there is no user pin leavethis field empty.
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--access-token-file
,--account
,--billing-project
,--configuration
,--flags-file
,--flatten
,--format
,--help
,--impersonate-service-account
,--log-http
,--project
,--quiet
,--trace-token
,--user-output-enabled
,--verbosity
.Run
$gcloud help
for details. - NOTES
- This command is currently in alpha and might change without notice. If thiscommand fails with API permission errors despite specifying the correct project,you might be trying to access an API with an invitation-only early accessallowlist. These variants are also available:
gcloudauthenterprise-certificate-configcreatelinux
gcloudbetaauthenterprise-certificate-configcreatelinux
Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-05-07 UTC.