request security certificate (unsigned)

Syntax

request security certificate enroll filename filename ca-file ca-file ca-name ca-name

encoding (binary | perm) url url

Description

Obtain a certificate from a certificate authority (CA). The results are saved in a specified file to the /var/etc/ikecert directory.

Options

filename filename—File that stores the public key certificate.

ca-file ca-file—Name of the certificate authority profile in the configuration.

ca-name ca-name—Name of the certificate authority.

encoding (binary | pem)—File format used for the certificate. The format can be a binary file or privacy-enhanced mail (PEM), an ASCII base64 encoded format.
Default: binary

url url—Certificate authority URL.

Required Privilege Level

maintenance

List of Sample Output

request security certificate (unsigned)

request security certificate (unsigned)

user@host> request security certificate enroll filename ca_verisign ca-file 
verisign ca-name juniper.net url 

http://pilotonsiteipsec.verisign.com/cgi-bin/pkiclient.exe 

URL: http://pilotonsiteipsec.verisign.com/cgi-bin/pkiclient.exe CA name: 
juniper.net CA file: verisign Encoding: binary 

Certificate enrollment has started. To view the status of your enrollment, check 
the key management process (kmd) log file at /var/log/kmd. <--------------