credctl status

Synopsis

credctl status

Description

credctl status displays the current device identity, Secure Enclave key accessibility, and AWS configuration. Use it to verify that credctl init completed successfully and that the hardware key is accessible.

Flags

None.

Examples

Initialised device with AWS configured

credctl status

Status: Initialised
  Fingerprint:    SHA256:aBcDeFg...
  Enclave type:   secure_enclave
  Key tag:        com.crzy.credctl.device-key
  Created:        2026-03-02T10:00:00Z
  Public key:     ~/.credctl/device.pub
  Key accessible: yes

AWS Configuration:
  Role ARN:   arn:aws:iam::123456789012:role/credctl-device-role
  Issuer URL: https://d1234567890.cloudfront.net
  Region:     us-east-1
  S3 Bucket:  credctl-oidc-123456789012

Device not initialised

credctl status

Status: Not initialised

Run 'credctl init' to create a device identity.

Exit codes

Code	Meaning
0	Status displayed successfully
1	Error reading configuration

See also

• credctl init — create a device identity
• Configuration reference — ~/.credctl/config.json schema