tps.0.host=<hostname>
tps.0.nickname=sharedSecret
tps.0.port=<secure port>
tps.0.userid=TPS-<hostname>-<secure port>
tps.list=0

# ldapadd -x -D "cn=Directory Manager" -w <password> -h localhost -f sample.ldif

  where 'sample.ldif' contains something like the following:

       dn: uid=<uid>,ou=People,dc=example,dc=com
       objectClass: person
       objectClass: organizationalPerson
       objectClass: inetorgperson
       objectClass: top
       objectClass: extensibleobject
       cn: <uid>
       sn: <uid>
       uid: <uid>
       givenName: <uid>
       mail: <uid>@<domain>
       firstname: <uid>
       edipi: 123456789
       pcc: AA
       exec-edipi: 999999999
       exec-pcc: BB
       exec-mail: <uid>@r<domain>
       userPassword: <password>

# pkicontrol status tps pki-tps

       op=var_set name=ra_host value=<hostname>
       op=var_set name=ra_port value=<unsecure port>
       op=var_set name=ra_uri value=/nk_service
       op=token_set cuid=40906145C76224192D2B msn=01020304 app_ver=6FBBC105 key_info=0101 major_ver=0 minor_ver=0
       op=token_set auth_key=404142434445464748494a4b4c4d4e4f
       op=token_set mac_key=404142434445464748494a4b4c4d4e4f
       op=token_set kek_key=404142434445464748494a4b4c4d4e4f
       op=ra_format uid=<uid> pwd=<password> new_pin=<password> num_threads=1
       op=exit

# tpsclient < format.tst

  which should finish successfully with something similar to this:

      .
      .
      .
      Output> Thread (0) status='1' time='3019 msec'
      Result> Success - Operation 'ra_format' Success (3019 msec)
      Command>op=exit