Pki Request-Certificate - H3C MSR Series Command Reference Manual

Please enter the key pair name:
import-key
Related commands
display pki certificate
public-key dsa
public-key ecdsa
public-key rsa

pki request-certificate

Use pki request-certificate to submit a local certificate request or generate a certificate request in
PKCS#10 format.
Syntax
pki request-certificate domain domain-name [ password password ] [ pkcs10 [ filename
filename ] ]
Views
System view
Predefined user roles
network-admin
Parameters
domain-name: Specifies a PKI domain by its name, a case-insensitive string of 1 to 31 characters.
The domain name cannot contain the special characters listed in
Table 72 Special characters
Character name
Tilde
Asterisk
Backslash
Vertical bar
Colon
password password: Sets the password for certificate revocation, a case-sensitive string of 1 to 31
characters. The password is contained in the certificate request and must be provided if the
certificate is revoked.
pkcs10: Displays BASE64-encoded PKCS#10 certificate request information, which can be used to
request a certificate by an out-of-band means, like phone, disk, or email.
filename filename: Specifies a local file for saving the certificate request in PKCS#10 format. The
filename argument is case-insensitive.
Usage guidelines
If SCEP fails, you can perform one of the following tasks:
•
Use the pkcs10 keyword to print the BASE64-encoded request information.
•
Use the pkcs10 filename filename option to save the request information to a local file and
transfer the file to the CA by using an out-of-band means. The file name can contain an absolute
path. If the specified path does exist, the request information cannot be saved.
Symbol
~
*
\
|
:
492
Table 72.
Character name
Dot
Left angle bracket
Right angle bracket
Quotation marks
Apostrophe
Symbol
.
<
>
"
'