ZyXEL Communications ZyWall 10W User Manual page 634

ZyWALL Series Internet Security Gateway
COMMAND
create
create
import
export
view
Q-2
Chart Q-1 Certificate Commands
scep_enrol Create a certificate request and enroll for a certificate
l <name> immediately online using SCEP protocol. <name> specifies a
<CA addr>
descriptive name for the enrolled certificate. <CA addr>
<CA cert>
specifies the CA server address. <CA cert> specifies the name
<auth key>
of the CA certificate. <auth key> specifies the key used for
<subject>
user authentication. If the key contains spaces, please put it in
[key size]
quotes. To leave it blank, type "". <subject> specifies a subject
name (required) and alternative name (required). The format is
"subject-name-dn;{ip,dns,email}=value". If the name contains
spaces, please put it in quotes. [key size] specifies the key
size. It has to be an integer from 512 to 2048. The default is
1024 bits.
cmp_enroll Create a certificate request and enroll for a certificate
<name> <CA
immediately online using CMP protocol. <name> specifies a
addr> <CA descriptive name for the enrolled certificate. <CA addr>
cert>
specifies the CA server address. <CA cert> specifies the name
<auth key>
of the CA certificate. <auth key> specifies the id and key used
<subject>
for user authentication. The format is "id:key". To leave the id
[key size]
and key blank, type ":". <subject> specifies a subject name
(required) and alternative name (required). The format is
"subject-name-dn;{ip,dns,email}=value". If the name contains
spaces, please put it in quotes. [key size] specifies the key
size. It has to be an integer from 512 to 2048. The default is
1024 bits.
[name] Import the PEM-encoded certificate from stdin. [name]
specifies the descriptive name (optional) as which the imported
certificate is to be saved. For my certificate importation to be
successful, a certification request corresponding to the
imported certificate must already exist on ZyWALL. After the
importation, the certification request will automatically be
deleted. If a descriptive name is not specified for the imported
certificate, the certificate will adopt the descriptive name of the
certification request.
<name> Export the PEM-encoded certificate to stdout for user to copy
and paste. <name> specifies the name of the certificate to be
exported.
<name> View the information of the specified local host certificate.
<name> specifies the name of the certificate to be viewed.
DESCRIPTION
Certificate Commands