Appendix N Certificates Commands - ZyXEL Communications ZyWALL 5 User Manual

The following describes the certificate commands. See the Command Interpreter appendix for
information on the command structure.
All of these commands start with certificates.
COMMAND
my_cert
create
create
create
create
create
Certificates Commands
Certificates Commands
Chart N-1 Certificates Commands
selfsigned Create a self-signed local host certificate. <name> specifies a
<name>
descriptive name for the generated certificate. <subject> specifies
<subject>
a subject name (required) and alternative name (required). The
[key size]
format is "subject-name-dn;{ip,dns,email}=value". If the name
contains spaces, please put it in quotes. [key size] specifies the
key size. It has to be an integer from 512 to 2048. The default is
1024 bits.
request Create a certificate request and save it to the router for later
<name> manual enrollment. <name> specifies a descriptive name for the
<subject> generated certification request. <subject> specifies a subject
[key size] name (required) and alternative name (required). The format is
"subject-name-dn;{ip,dns,email}=value". If the name contains
spaces, please put it in quotes. [key size] specifies the key size. It
has to be an integer from 512 to 2048. The default is 1024 bits.
scep_enroll Create a certificate request and enroll for a certificate
<name> <CA immediately online using SCEP protocol. <name> specifies a
addr> <CA
descriptive name for the enrolled certificate. <CA addr> specifies
cert> <auth
the CA server address. <CA cert> specifies the name of the CA
key>
certificate. <auth key> specifies the key used for user
<subject>
authentication. If the key contains spaces, please put it in quotes.
[key size]
To leave it blank, type "". <subject> specifies a subject name
(required) and alternative name (required). The format is "subject-
name-dn;{ip,dns,email}=value". If the name contains spaces,
please put it in quotes. [key size] specifies the key size. It has to
be an integer from 512 to 2048. The default is 1024 bits.
cmp_enroll Create a certificate request and enroll for a certificate
<name> <CA
immediately online using CMP protocol. <name> specifies a
addr> <CA
descriptive name for the enrolled certificate. <CA addr> specifies
cert> <auth
the CA server address. <CA cert> specifies the name of the CA
key>
certificate. <auth key> specifies the id and key used for user
<subject>
authentication. The format is "id:key". To leave the id and key
[key size]
blank, type ":". <subject> specifies a subject name (required) and
alternative name (required). The format is "subject-name-
dn;{ip,dns,email}=value". If the name contains spaces, please put
it in quotes. [key size] specifies the key size. It has to be an
integer from 512 to 2048. The default is 1024 bits.
ZyWALL 5 Internet Security Appliance
Appendix N
DESCRIPTION
N-1