2060
C
134: PKI C
HAPTER
Description
Related command:
Example
pki request-certificate domain
Syntax
View
Parameter
Description
Related command:
Example
C
ONFIGURATION
OMMANDS
domain-name: Name of the PKI domain, a string of 1 to 15 characters.
der: Specifies the certificate format of DER.
p12: Specifies the certificate format of P12.
pem: Specifies the certificate format of PEM.
filename filename: Name of the certificate file, a case-insensitive string of 1 to
127 characters. It defaults to domain-name_ca.cer or domain-name_local.cer, the
name for the file to be created to save the imported certificate.
Use the
pki import-certificate
certificate from a file and save it locally.
pki domain.
# Import the CA certificate for PKI domain cer in the format of PEM.
<Sysname> system-view
[Sysname] pki import-certificate ca domain cer pem
pki request-certificate domain domain-name [ password ] [ pkcs10 [ filename
filename ] ]
System view
domain-name: Name of the PKI domain name, a string of 1 to 15 characters.
password: Password for certificate revocation, a case-sensitive string of 1 to 31
characters.
pkcs10: Displays the BASE64-encoded PKCS#10 certificate request.
filename: Name of the file for saving the PKCS#10 certificate request, a
case-insensitive string of 1 to 127 characters.
Use the
pki request-certificate domain
from a CA through SCEP. If SCEP fails, you can use the pkcs10 keyword to save
the local certificate request in BASE64 format and send it to the CA by an
out-of-band means like phone, disk or e-mail.
This operation will not be saved in the configuration file.
pki domain.
# Display the PKCS#10 certificate request information.
command to import a CA certificate or local
command to request a local certificate