====== Client certificate ======

===== Name =====

    cert

===== Details =====

^ Type                | [[:cfgtype:hex|Byte sequence]]        |
^ DHCP option number  | 175.91                                |
^ ISC dhcpd syntax    | option ipxe.cert                      |

===== Examples =====

=== Convert a certificate file to hex dump format ===

    openssl x509 -in client.crt -outform DER | \
        perl -0777 -ne 'print join ( ":", map { sprintf "%02x", $_ } unpack "C*" )."\n"'

=== Configure the client certificate via VMware GuestInfo ===

    guestinfo.ipxe.cert = "30:82:03:cf:30:82:02:b7:a0:03:02:01:02:02:09:00:e5:2c: ... :78:2f:94"

===== Description =====

Specifies the client certificate used to authenticate iPXE to TLS servers.

===== See also =====

  * ''[[:cfg:privkey]]''
  * iPXE [[:crypto|cryptography]] guide
  * [[:cfg|List of all iPXE settings]]

===== Notes =====

Client certificates are usually too large to be transmitted via DHCP.

A certificate must have a corresponding [[:cfg:privkey|private key]].