Filter
Top Products
2060 CHAPTER 134: PKI CONFIGURATION COMMANDS
domain-name: Name of the PKI domain, a string of 1 to 15 characters.
der: Specifies the certificate format of DER.
p12: Specifies the certificate format of P12.
pem: Specifies the certificate format of PEM.
filename filename: Name of the certificate file, a case-insensitive string of 1 to
127 characters. It defaults to domain-name_ca.cer or domain-name_local.cer, the
name for the file to be created to save the imported certificate.
Description Use the
pki import-certificate command to import a CA certificate or local
certificate from a file and save it locally.
Related command: pki domain.
Example # Import the CA certificate for PKI domain cer in the format of PEM.
<Sysname> system-view
[Sysname] pki import-certificate ca domain cer pem
pki request-certificate domain
Syntax pki request-certificate domain domain-name [ password ] [ pkcs10 [ filename
filename ]]
View System view
Parameter domain-name: Name of the PKI domain name, a string of 1 to 15 characters.
password: Password for certificate revocation, a case-sensitive string of 1 to 31
characters.
pkcs10: Displays the BASE64-encoded PKCS#10 certificate request.
filename: Name of the file for saving the PKCS#10 certificate request, a
case-insensitive string of 1 to 127 characters.
Description Use the
pki request-certificate domain command to request a local certificate
from a CA through SCEP. If SCEP fails, you can use the pkcs10 keyword to save
the local certificate request in BASE64 format and send it to the CA by an
out-of-band means like phone, disk or e-mail.
This operation will not be saved in the configuration file.
Related command: pki domain.
Example # Display the PKCS#10 certificate request information.