AT-S62 Command Line User’s Guide
525
SET PKI CERTIFICATE
Syntax
set pki certificate=”name”
[trusted=yes|no|on|off|true|false]
[type=ca|ee|self]
Parameters
certificate Specifies the certificate name whose trust or type you want
to change. The name is case sensitive. If the name contains
spaces, it must be enclosed in quotes.
trusted Specifies whether or not the certificate is from a trusted CA.
Possible settings are:
yes, on, true Specifies that the certificate is from a
trusted CA. This is the default. The options
are equivalent.
no, off, false Specifies that the certificate is not from a
trusted CA. The options are equivalent.
type Specifies a type for the certificate. Possible settings are:
ca Tags the certificate as a CA certificate.
ee Tags the certificate as belonging to another end
entity (EE). This is the default.
self Tags the certificate as its own.
Description
This command changes the level of trust and type for a certificate in the
switch’s certificate database. To list the certificates in the database, refer
to SHOW PKI CERTIFICATE on page 530.
The TRUSTED parameter specifies whether the certificate is from a
trusted CA. The default is TRUE. Only self-signed root CA certificates are
typically set to be automatically trusted, and only after the user has
checked the certificate’s fingerprint and other details using SHOW PKI
CERTIFICATE on page 530.