This tool supports 6 actions, as listed below:

Generate platform root CA keystore and certifiate
 Usage:
 -generate -name <platform name> -out <path of output directory>
  
Sign tenant CSR (Certificate Signing Request)
 Usage:
 -certificate -ks <platform root CA keystore path> -csr <CSR path> -out <path of output directory>

Generate logging keys (signing and encryption for every context)
 Usage:
 -loggingkeys -ks <platform root CA keystore path> -ser <path of JSON file with list of services> -out <path of output directory>

Generate system keys
 Usage:
 -systemkeys -tenant <tenant name> -ks <platform root CA keystore path> -ser <path of JSON file with list of services> -out <path of output directory>

Generate Control Component Node (CCN) keys and certificates
 Usage:
 -controlComponentNodeKeys -ks <platform root CA keystore path> -nodes <path of JSON file with list of cc nodes> -out <path of output directory>

Install platform to all contexts
 Usage:
 -installPlatform -rootca <platform root CA certificate path> [-rootcaissuer <path of certificate to be used as root CA issuer>] -loggingkeys <path of directory that contains all logging keys (encryption and signing)> -ser <path of JSON file with list of services> -password <Trusted Build Keystore password>
Note: the parameter "rootcaissuer" is optional.

Install tenant to appropriate contexts
 Usage:
  -installTenant -tenantid <tenant id> -tenantcert <path of tenant certificate> -systemkeys <path of directory containing system keystores> -password <Trusted Build Keystore password>

Install tenant to a provided list of services
 Usage:
  -installTenantService -tenantid <tenant id> -tenantcert <path of tenant certificate> -systemkeys <path of directory containing system keystores> -ser <path of JSON file with list of services> -password <Trusted Build Keystore password>

 