Nortel BCM50a Configuration Manual page 274

274 Appendix G Command Interpreter
Table 64 Certificates commands
Command
create
import
export
view
verify
delete
list
N0115791
Description
Creates a certificate request and enrolls for a
cmp_enroll
certificate immediately online using CMP protocol.
<name> <CA
<name> specifies a descriptive name for the enrolled
addr> <CA
certificate.
cert> <auth
<CA addr> specifies the CA server address.
key>
<CA cert> specifies the name of the CA certificate.
<subject>
<auth key> specifies the id and key used for user
[key size]
authentication. The format is "id:key". To leave the id
and key blank, type ":".
<subject> specifies a subject name (required) and
alternative name (required). The format is
"subject-name-dn;{ip,dns,email}=value". If the name
contains spaces, put it in quotes.
[key size] specifies the key size. It has to be an
integer from 512 to 2 048. The default is 1 024 bits.
Imports the PEM-encoded certificate from stdin.
[name]
[name] specifies the descriptive name (optional) the
imported certificate is saved as. For my certificate
importation to be successful, a certification request
corresponding to the imported certificate must
already exist on BCM50a Integrated Router. After
the importation, the certification request is
automatically deleted. If a descriptive name is not
specified for the imported certificate, the certificate
adopts the descriptive name of the certification
request.
Exports the PEM-encoded certificate to stdout for
<name>
theuser to copy and paste.
<name> specifies the name of the certificate to be
exported.
Views the information of the specified local host
<name>
certificate.
<name> specifies the name of the certificate to be
viewed.
Verifies the certification path of the specified local
<name>
host certificate.
[timeout]
<name> specifies the name of the certificate to be
verified.
[timeout] specifies the timeout value in seconds
(optional). The default timeout value is 20 seconds.
Deletes the specified local host certificate.
<name>
<name> specifies the name of the certificate to be
deleted.
Lists all my certificate names and basic information.