sample.jks.yaml

config:
  connection:
    platform: tpp
    url: https://my.tpp.instance.company.com # URL to TPP instance
    trustBundle: /path/to/my/trustbundle.pem # TrustBundle for TPP connection
    credentials:
      accessToken: '{{ Env "TPP_ACCESS_TOKEN" }}'
      refreshToken: '{{ Env "TPP_REFRESH_TOKEN" }}'
      clientId: vcert-sdk
certificateTasks:
  - name: myCertificate # Task Identifier, no relevance in tool run
    renewBefore: 31d
    request:
      csr: local
      subject:
        # Templating needs to go between quotes to avoid issues when refreshing tokens
        commonName: '{{ Hostname | ToLower -}}.{{- Env "USERDNSDOMAIN" | ToLower }}'
        country: US
        locality: Salt Lake City
        state: Utah
        organization: Venafi Inc
        orgUnits:
          - engineering
          - marketing
      zone: "Open Source\\vcert"
    installations:
      - format: JKS
        file: "/path/to/my/certificate.jks"
        jksAlias: venafi
        jksPassword: foobar123 # Minimum six characters length
        afterInstallAction: "echo Success!!!"