Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    request security pki generate-key-pair (Security)

    Syntax

    request security pki generate-key-pair certificate-id certificate-id-name<size (256 | 384 | 512 | 1024 | 2048 | 4096)><type (dsa | ecdsa | rsa)>

    Release Information

    Command introduced in Junos OS Release 11.1. Options to support Elliptic Curve Digital Signature Algorithm (ECDSA) added in Junos OS Release 12.1X45-D10.

    Description

    Generate a public key infrastructure (PKI) public/private key pair for a local digital certificate.

    Options

    certificate-id certificate-id-name

    Name of the local digital certificate and the public/private key pair.

    size

    Key pair size. The key pair size can be 256, 384, 512, 1024, 2048, or 4096 bits. Key pair sizes of 256 and 384 bits are compatible with ECDSA. If a key pair size is not specified, the default value, 1024 bits, is applied.

    type

    The algorithm to be used for encrypting the public/private key pair:

    • ecdsa—ECDSA encryption with SHA-2 hash
    • dsa—Digital Signal Algorithm (DSA) encryption with SHA-1 hash
    • rsa—Rivest Shamir Adleman (RSA) encryption with SHA-1 hash (default)

    Required Privilege Level

    maintenance

    List of Sample Output

    request security pki generate-key-pair

    Output Fields

    When you enter this command, you are provided feedback on the status of your request.

    Sample Output

    request security pki generate-key-pair

    user@switch> request security pki generate-key-pair type rsa size 1024 certificate-id test
    Generated key pair test, key size 1024 bits
    

    Modified: 2013-08-15