[Contents] [Prev] [Next] [Index] [Report an Error]

Requesting a CA Digital Certificate

For J-series Services Routers and AS and MultiServices PICs installed on M-series and T-series routing platforms, issue the following command to obtain a digital certificate from a CA. Specify a configured ca-profile-name to request a CA certificate from the trusted CA.



user@host>request security pki ca-certificate
enroll ca-profile ca-profile-name

For information about how to configure a CA profile see, Configuring the Certificate Authority Properties.

In this example, the certificate is enrolled online and installed into the routing platform automatically.



user@host> request security pki ca-certificate
enroll ca-profile entrust

Received following certificates:
Certificate: C=us, O=juniper
 Fingerprint:00:8e:6f:58:dd:68:bf:25:0a:e3:f9:17:70:d6:61:f3:53:a7:79:10
Certificate: C=us, O=juniper, CN=First Officer
 Fingerprint:bc:78:87:9b:a7:91:13:20:71:db:ac:b5:56:71:42:ad:1a:b6:46:17
Certificate: C=us, O=juniper, CN=First Officer
 Fingerprint:46:71:15:34:f0:a6:41:76:65:81:33:4f:68:47:c4:df:78:b8:e3:3f
Do you want to load the above CA certificate ? [yes,no] (no) yes

Note: If you obtain the CA certificate directly from the CA (for example, as an e-mail attachment or Web site download), you can install it with the request security pki ca-certificate load command. For more information, see the JUNOS System Basics and Services Command Reference.

[Contents] [Prev] [Next] [Index] [Report an Error]