[Contents] [Prev] [Next] [Index] [Report an Error]

request security certificate (unsigned)

Syntax

request security certificate enroll filename filename ca-file ca-file ca-name ca-name
encoding (binary | perm) url url

Release Information

Command introduced before JUNOS Release 7.4.

Description

(Encryption interface on M-series and T-series routing platforms only) Obtain a certificate from a certificate authority (CA). The results are saved in a specified file to the /var/etc/ikecert directory.

Options

filename filenameFile that stores the public key certificate.

ca-file ca-fileName of the certificate authority profile in the configuration.

ca-name ca-nameName of the certificate authority.

encoding (binary | pem) — File format used for the certificate. The format can be a binary file or privacy-enhanced mail (PEM), an ASCII base64-encoded format. The default value is binary.

url urlCertificate authority URL.

Required Privilege Level

maintenance

List of Sample Output

request security certificate (unsigned)

Output Fields

When you enter this command, you are provided feedback on the status of your request.

request security certificate (unsigned)

user@host> request security certificate enroll filename ca_verisign ca-file verisign ca-name juniper.net url http://pilotonsiteipsec.verisign.com/cgi-bin/pkiclient.exe
URL: http://pilotonsiteipsec.verisign.com/cgi-bin/pkiclient.exe CA name: juniper.net CA file: verisign Encoding: binary 
Certificate enrollment has started. To view the status of your enrollment, check the key management process (kmd) log file at /var/log/kmd. <-------------- 

[Contents] [Prev] [Next] [Index] [Report an Error]