endpoint-activate - Add or renew security credentials


endpoint-activate [OPTIONS] ENDPOINT

endpoint-activate -g ENDPOINT


endpoint-activate assigns a short term security credential to specified endpoint(s).

If no -m, -g, or --s3 options are given, endpoint-activate will do the following:

  1. If the endpoint is already activated, do nothing and exit.

  2. Try to autoactivate it, like other CLI commands (ls, transfer, etc.) do. If this succeeds, exit.

  3. If the endpoint has a default OAuth Identity Provider, display the web-based activation URL and exit.

  4. If the endpoint has a default MyProxy Identity Provider, do interactive MyProxy authentication (equivalent to the -m option)

Use the endpoint-modify command to set a default MyProxy or OAuth Identity Provider.

Endpoint Naming

This command supports the following endpoint identification formats:

  • UUID: "7865988a-aeb3-4e55-b8cd-938c258e7854"

  • Bookmark: "^test_bookmark". The bookmark name must be prepended with a "^" character. The bookmark name may have URL-escaped characters.

  • Legacy Name: "bob#test_endpoint". This contains the user who owns the endpoint and the endpoint legacy name.

  • Unqualified Legacy Name: "test_endpoint". The user name defaults to the current logged in user.



Use a GSI-SSH delegated credential


Retrieve a credential from the specified Myproxy server. A port may also be specified.


Set the Myproxy username. If this is not set, the command will prompt for a user name.

--dn DN

Set the Myproxy server’s subject DN. Sometimes the Myproxy server’s certificate differs from its host name, causing an error.

--myproxy-lifetime HOURS

Set the requested Myproxy credential lifetime. The Myproxy server may still provide a shorter lived credential depending on its configuration. The default lifetime is 24 hours, or what the endpoint defines.


Activate an endpoint using its default activation method:

$ endpoint-activate go#ep1

Activate an endpoint using a specific Myproxy server hostname and port:

$ endpoint-activate -m myep1

© 2010- The University of Chicago Legal