ipa-certupdate(1) IPA Manual Pages ipa-certupdate(1)

# [NAME](#NAME)

ipa-certupdate - Update local IPA certificate databases with certificates from the server

# [SYNOPSIS](#SYNOPSIS)

**ipa-certupdate** \[*OPTIONS*...]

# [DESCRIPTION](#DESCRIPTION)

**ipa-certupdate** can be used to update local IPA certificate databases with certificates from the server.

# [OPTIONS](#OPTIONS)

[**--force-server**=*ipa.server.fqdn*](#force)

Force the use of the specified server for the update. Use only fully-qualified domain name of the server, and verify that target server has a correct set of CA certificates, local certificates will be overwritten.

[**-v**, **--verbose**](#v)

Print debugging information.

[**-q**, **--quiet**](#q)

Output only errors.

[**--log-file**=*FILE*](#log)

Log to the given file.

# [EXIT STATUS](#EXIT_STATUS)

0 if the command was successful

1 if an error occurred

Dec 27 2025 IPA

---

Document: ipa-certupdate(1) from freeipa 4.13.4-r3 (Chainguard OS)
Source: https://pagure.io/freeipa.git