HP 5920

• public-key dsa
• public-key ecdsa
• public-key rsa
pki request-certificate
Use pki request-certificate to submit a local certificate request or generate a certificate request in
PKCS#10 format.
Syntax
pki request-certificate domain domain-name [ password password ] [ pkcs10 [ filename filename ] ]
Views
System view
Predefined user roles
network-admin
Parameters
domain domain-name: Specifies the name of a PKI domain, a case-insensitive string of 1 to 31
characters.
password password: Sets the password for certificate revocation, a case-sensitive string of 1 to 31
characters. The password is contained in the certificate request and must be provided if the certificate is
revoked.
pkcs10: Displays BASE64-encoded PKCS#10 certificate request information, which can be used to
request a certificate by an out-of-band means, like phone, disk, or email.
filename filename: Specifies a local file for saving the certificate request in PKCS#10 format. The
filename argument is case-insensitive.
Usage guidelines
If SCEP fails, you can use the pkcs10 keyword to print the BASE64-encoded request information, or use
the pkcs10 filename filename option to save the request information to a local file and send the file to the
CA by an out-of-band means. The specified file name can contain an absolute path. If the specified path
does exist, the request information cannot be saved.
This command is not saved in the configuration file.
Examples
# Display information about the certificate request in the PKCS#10 format.
<Sysname> system-view
[Sysname] pki request-certificate domain aaa pkcs10
*** Request for general certificate ***
-----BEGIN NEW CERTIFICATE REQUEST-----
MIIBTDCBtgIBADANMQswCQYDVQQDEwJqajCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
gYkCgYEAw5Drj8ofs9THA4ezkDcQPBy8pvH1kumampPsJmx8sGG52NFtbrDTnTT5
212