If the CA server automatically approves certificate requests, the PKI entity can obtain the certificate
immediately after it submits a certificate request. In this case, the PKI entity does not send queries to
the CA server.
Examples
# Set the polling interval to 15 minutes, and the maximum number of query attempts to 40.
<Sysname> system-view
[Sysname] pki domain aaa
[Sysname-pki-domain-aaa] certificate request polling interval 15
[Sysname-pki-domain-aaa] certificate request polling count 40
Related commands
display pki certificate request-status
certificate request url
Use certificate request url to specify the URL of the certificate request reception authority (CA or
RA) to which the device should send SCEP certificate requests.
Use undo certificate request url to restore the default.
Syntax
certificate request url url-string
undo certificate request url
Default
The URL of the certificate request reception authority is not specified.
Views
PKI domain view
Predefined user roles
network-admin
Parameters
url-string: Specifies the URL of the certificate request reception authority, a case-sensitive string of 1
to 511 characters. The URL length is restricted by the CLI string limitation or the url-string parameter,
whichever is smaller.
Usage guidelines
The URL is in the format http://server_location/ca_script_location, where:
•
The server_location argument is the IPv4 address, IPv6 address, or domain name of the
certificate request reception authority (CA or RA) server.
•
The cgi_script_location argument is the path of the application script on the server.
Examples
# Set the certificate request URL to http://169.254.0.1/certsrv/mscep/mscep.dll.
<Sysname> system-view
[Sysname] pki domain a
[Sysname-pki-domain-a] certificate request url
http://169.254.0.1/certsrv/mscep/mscep.dll
457