User Category Permission
Storage integration administrator Disallowed
Application administrator Disallowed
Security administrator Allowed
Read-only users Disallowed
Technicians Disallowed
Completion Codes:
v FAILED_CREATING_CERTIFICATE_SIGNING_REQUEST
Failed to generate the certificate signing request
Troubleshooting: Generate a certificate signing request specifying a correct
subject (e.g., '/C=US/CN=IBM')
v CERTIFICATE_NAME_DOES_NOT_EXIST
Certificate name was not found
Troubleshooting: Choose a different name
Generate a Private Key and CSR
Generate a Private Key and CSR
pki_generate_private_key_and_csr name=Name subject=Subject [ bits=Bits ]
Parameters:
Name Type Description Mandatory Default
bits Integer The private key
size in bits. It can
be between 1024 to
4096
N 2048
name String The certificate
symbolic name
Y N/A
subject N/A The subject name
for the generated
certificate request.
The argument
must be formatted
as
/type0=value0/
type1=value1/
type2=... .
Y N/A
Generate a Private Key and CSR
Example:
xcli -u -c XIV1 pki_generate_private_key_and_csr name="my_cert"
subject="/C=US/CN=IBM" bits=1024
Id Name Default Position
csr CSR 1
Chapter 16. PKI configuration
339