492
Please enter the key pair name:
import-key
Related commands
display pki certificate
public-key dsa
public-key ecdsa
public-key rsa
pki request-certificate
Use pki request-certificate to submit a local certificate request or generate a certificate request in
PKCS#10 format.
Syntax
pki request-certificate domain domain-name [ password password ] [ pkcs10 [ filename
filename ] ]
Views
System view
Predefined user roles
network-admin
Parameters
domain-name: Specifies a PKI domain by its name, a case-insensitive string of 1 to 31 characters.
The domain name cannot contain the special characters listed in Table 72.
Table 72 Special characters
Tilde ~ Dot .
Asterisk * Left angle bracket <
Backslash \ Right angle bracket >
Vertical bar | Quotation marks "
Colon : Apostrophe '
password password: Sets the password for certificate revocation, a case-sensitive string of 1 to 31
characters. The password is contained in the certificate request and must be provided if the
certificate is revoked.
pkcs10: Displays BASE64-encoded PKCS#10 certificate request information, which can be used to
request a certificate by an out-of-band means, like phone, disk, or email.
filename filename: Specifies a local file for saving the certificate request in PKCS#10 format. The
filename argument is case-insensitive.
Usage guidelines
If SCEP fails, you can perform one of the following tasks:
• Use the pkcs10 keyword to print the BASE64-encoded request information.
• Use the pkcs10 filename filename option to save the request information to a local file and
transfer the file to the CA by using an out-of-band means. The file name can contain an absolute
path. If the specified path does exist, the request information cannot be saved.