PKIUtil client

Entrust PKIUtil is a Java-based client tool for:

  • Generating key pairs with post-quantum or classical algorithms.

  • Generating certificate requests (PKCS#10 CSR) for a certificate authority.

  • Generating root, issuing, or end-entity certificates.

  • Generate certificate revocation lists (CRLs)

  • Sign messages in raw signature format.

  • Validating certificates issued by certificate authorities like Entrust PKIaaS or ECA.

  • Validate certificates, CSRs, CRLs, or signed messages created by the utility.

See below to install and run this tool.

The client functionalities are provided by the etjava/lib/entpq.jar library distributed in the etjava90_pqbeta.zip file.