Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation  Back up to About Overview 
ContentIndex
  
[+] Expand All
[-] Collapse All

No index entries found.

certficate (System Services)

Syntax

certificate certificate-filename;

Hierarchy Level

[edit system services webapi https]

Release Information

Statement introduced in Junos OS Release 12.3X48-D30.

Description

Configure a custom certificate. A certificate is required when HTTPS is used for the Web API function (webapi), which allows the ClearPass Policy Manager (CPPM) to initiate a connection to the SRX Series device.

The Web API daemon (webapi), which acts as an HTTP or HTTPS server, allows the CPPM, acting as a client, to send user authentication and identity information to the SRX Series device. The Web API function is part of the integrated ClearPass authentication and enforcement feature that uses Aruba ClearPass as its authentication source.

When you configure the Web API daemon to use HTTPS, you can use the default certificate, a custom one, or a certificate generated by the public key infrastructure (PKI) local store.

If you configure a custom certificate, you must configure a certificate key with it. Here is an example of how to configure a certificate and certificate key:

set system services webapi https certificate /var/tmp/certificate.crt set system services webapi https certificate-key /var/tmp/certificate.key

Note: The Web API function supports only the Privacy-Enhanced Mail (PEM) format for the custom certificate and certificate key.

Required Privilege Level

  • system—To view this statement in the configuration.
  • system-control—To add this statement to the configuration.

Modified: 2016-05-01