Nexus Documentation

Space shortcuts

Page tree

Nexus information on: Azure Key Leakage - Storm-0558
Nexus awareness advisory on Microsoft’s update KB5014754

Visit Nexus to get an overview of Nexus' solutions, read customer cases, access the latest news, and more.

ActiveEntitiesTool is a command based tool in Smart ID Certificate Manager, used to count the number of current active certificates, which were issued by CAs that belong to the provided domain and its subdomains in the provided time period.

ActiveEntitiesTool also counts the number of distinct subject entries connected to them. The tool counts the distinct SubjEntryNr in Certificates table which results in having an offset in corner cases, for example, a device could have two certs with two different SubjCommonName, hence two SubjEntryNr.

Expand/Collapse All

The program is located in the <install_root>/tools directory relative to where CM is installed.

help

Shows the help text.

domain

The domain to search in.

from

Limits the search starting from this date. The date should be in ISO-8601 format, for example, 2011-12-03T10:15:30, in system time zone.

today

Counts only active entities issued today.

Example 1 - counts the number of distinct subjects and active certificates which were issued by CAs under 'System Domain' from date 2020-01-01T00:00:00 until now. 

Example 1
java -jar cm-tools.jar ActiveEntitiesTool -domain "System Domain" -from "2020-01-01T00:00:00"

Example 2 - counts the number of distinct subjects and active certificates which were issued by CAs under 'System Domain' today.

Example 2
java -jar cm-tools.jar ActiveEntitiesTool -domain "System Domain" -today

Example 3 - counts the number of ALL distinct subjects and active certificates which were issued by CAs under 'System Domain'.

Example 3
java -jar cm-tools.jar ActiveEntitiesTool -domain "System Domain"

Use the following environment variable to configure ActiveEntitiesTool:

Environment variableDescription
CM_HOME

(optional) Specifies a directory where the CM configuration is installed, usually referred to as <configuration_root>. Specifying this environment variable allows the program to use database connection details from cm.conf if placed in a nonstandard location.

If this environment variable is not specified, and the program is placed in the default directory of <install_root>/tools, the program will automatically find the CM configuration and the database connection details.

This article is valid for Certificate Manager 8.4 or later.

Related information

© 2023 Technology Nexus Secured Business Solutions AB. All rights reserved.
Contact Nexus | https://www.nexusgroup.com | Disclaimer | Terms & Conditions