TSS GENREQ command does not cause the command to be recorded in the CA Top Secret Recovery File.

Document ID : KB000054113
Last Modified Date : 14/02/2018
Show Technical Document Details

Question:

When running a TSSAUDIT report with the operand of CHANGES and GENCERT, TSS GENCERT commands are recorded to the CA Top Secret Recovery File, but not the TSS GENREQ command. Why?

Answer:Only TSS commands that make changes to the CA Top Secret Security File are written to the CA Top Secret Recovery File.

The GENCERT command updates the CA Top Secret Security File.

The TSS GENREQ command does not. It only retrieves information from the CA Top Secret Security File.

Additional Information:

Please refer to the CA Top Secret Command Functions Guide for more details about the TSS GENCERT and TSS GENREQ command.