Skip to content

PKI Server ACME Database CLI

Endi S. Dewata edited this page Oct 7, 2025 · 10 revisions

Displaying ACME Database Configuration

Database configuration for DS:

$ pki-server acme-database-show
  Database Type: ds
  Server URL: ldap://ds.example.com:3389
  Authentication Type: BasicAuth
  Bind DN: cn=Directory Manager
  Bind Password: ********
  Base DN: dc=acme,dc=pki,dc=example,dc=com

Database configuration for PostgreSQL:

$ pki-server acme-database-show
  Database Type: postgresql
  Server URL: jdbc:postgresql://localhost:5432/acme
  Username: acme
  Password: ********

Modifying ACME Database Configuration

$ pki-server acme-database-mod
The current value is displayed in the square brackets.
To keep the current value, simply press Enter.
To change the current value, enter the new value.
To remove the current value, enter a blank space.

Enter the type of the database. Available types: ds, in-memory, ldap, openldap, postgresql.
  Database Type [postgresql]:

Enter the location of the PostgreSQL server.
  Server URL [jdbc:postgresql://localhost:5432/acme]:

Enter the username for basic authentication.
  Username [acme]:

Enter the password for basic authentication.
  Password [********]:

Initializing ACME Database

If this is the first ACME instance, initialize the ACME database with the following command:

$ pki-server acme-database-init

By default this command will create DS indexes in userroot backend. It can be changed using the --ds-backend parameter.

For each additional ACME replica, configure the ACME database replication.

Availability: Since PKI 11.9.

Rebuilding ACME Database Indexes

If necessary, the ACME database can be reindexed with the following command:

$ pki-server acme-database-index-rebuild

By default this command will rebuild DS indexes in userroot backend. It can be changed using the --ds-backend parameter.

Availability: Since PKI 11.9.

Clone this wiki locally