H3C s3100 series Command Manual page 1115

Parameters
domain-name: Name of the PKI domain name, a string of 1 to 15 characters.
password: Password for certificate revocation, a case-sensitive string of 1 to 31 characters.
pkcs10: Displays the BASE64-encoded PKCS#10 certificate request.
filename: Name of the file for saving the PKCS#10 certificate request, a case-insensitive string of 1 to
127 characters.
Description
Use the pki request-certificate domain command to request a local certificate from a CA through
SCEP. If SCEP fails, you can use the pkcs10 keyword to save the local certificate request in BASE64
format and send it to the CA by an out-of-band means like phone, disk or e-mail.
This operation will not be saved in the configuration file.
Related commands: pki domain.
Examples
# Display the PKCS#10 certificate request information.
<Sysname> system-view
[Sysname] pki request-certificate domain 1 pkcs10
pki retrieval-certificate
Syntax
pki retrieval-certificate { ca | local } domain domain-name
View
System view
Parameters
ca: Retrieves the CA certificate.
local: Retrieves the local certificate.
domain-name: Name of the PKI domain used for certificate request.
Description
Use the pki retrieval-certificate command to retrieve a certificate from the server for certificate
distribution.
Related commands: pki domain.
Examples
# Retrieve the CA certificate from the certificate issuing server.
<Sysname> system-view
[Sysname] pki retrieval-certificate ca domain 1
1-20