Keyfactor PAM Provider APIs.
Privileged Access Management (PAM) functionality in Keyfactor Web APIs allows for configuration of third party PAM providers to secure certificate stores. The PAM component of the Keyfactor API includes methods necessary to programmatically create, delete, edit, and list PAM Providers.
-h, --help help for pam
--api-path string API Path to use for authenticating to Keyfactor Command. (default is KeyfactorAPI) (default "KeyfactorAPI")
--auth-provider-profile string The profile to use defined in the securely stored config. If not specified the config named 'default' will be used if it exists. (default "default")
--auth-provider-type string Provider type choices: (azid)
--client-id string OAuth2 client-id to use for authenticating to Keyfactor Command.
--client-secret string OAuth2 client-secret to use for authenticating to Keyfactor Command.
--config string Full path to config file in JSON format. (default is $HOME/.keyfactor/command_config.json)
--debug Enable debugFlag logging.
--domain string Domain to use for authenticating to Keyfactor Command.
--exp Enable expEnabled features. (USE AT YOUR OWN RISK, these features are not supported and may change or be removed at any time.)
--format text How to format the CLI output. Currently only text is supported. (default "text")
--hostname string Hostname to use for authenticating to Keyfactor Command.
--log-insecure Log insecure API requests. (USE AT YOUR OWN RISK, this WILL log sensitive information to the console.)
--no-prompt Do not prompt for any user input and assume defaults or environmental variables are set.
--offline Will not attempt to connect to GitHub for latest release information and resources.
--password string Password to use for authenticating to Keyfactor Command. WARNING: Remember to delete your console history if providing kfcPassword here in plain text.
--profile string Use a specific profile from your config file. If not specified the config named 'default' will be used if it exists.
--token-url string OAuth2 token endpoint full URL to use for authenticating to Keyfactor Command.
--username string Username to use for authenticating to Keyfactor Command.
- kfutil - Keyfactor CLI utilities
- kfutil pam create - Create a new PAM Provider, currently only supported from file.
- kfutil pam delete - Delete a defined PAM Provider by ID.
- kfutil pam get - Get a specific defined PAM Provider by ID.
- kfutil pam list - Returns a list of all the configured PAM providers.
- kfutil pam types-create - Creates a new PAM provider type.
- kfutil pam types-list - Returns a list of all available PAM provider types.
- kfutil pam update - Updates an existing PAM Provider, currently only supported from file.