3Com MSR 30, MSR 50 manual Pki request-certificate domain, Related command pki domain

2060 CHAPTER 134: PKI CONFIGURATION COMMANDS

domain-name: Name of the PKI domain, a string of 1 to 15 characters.

der: Specifies the certificate format of DER.

p12: Specifies the certificate format of P12.

pem: Specifies the certificate format of PEM.

filename filename: Name of the certificate file, a case-insensitive string of 1 to

127characters. It defaults to domain-name_ca.cer or domain-name_local.cer, the name for the file to be created to save the imported certificate.

Description Use the pki import-certificatecommand to import a CA certificate or local certificate from a file and save it locally.

Related command: pki domain.

Example # Import the CA certificate for PKI domain cer in the format of PEM.

<Sysname> system-view

[Sysname] pki import-certificate ca domain cer pem

pki request-certificate domain

Syntax pki request-certificate domain domain-name [ password ] [ pkcs10 [ filename filename ] ]

View System view

Parameter domain-name: Name of the PKI domain name, a string of 1 to 15 characters.

password: Password for certificate revocation, a case-sensitive string of 1 to 31 characters.

pkcs10: Displays the BASE64-encoded PKCS#10 certificate request.

filename: Name of the file for saving the PKCS#10 certificate request, a case-insensitive string of 1 to 127 characters.

Description Use the pki request-certificate domain command to request a local certificate from a CA through SCEP. If SCEP fails, you can use the pkcs10 keyword to save the local certificate request in BASE64 format and send it to the CA by an out-of-band means like phone, disk or e-mail.

This operation will not be saved in the configuration file.

Related command: pki domain.

Example # Display the PKCS#10 certificate request information.