Loading CA and Local Certificates Manually

After you download certificates from a certificate authority (CA), you transfer them to the device (for example, using FTP), then load them.

Before You Begin
Generate a public-private key pair. See Generating a Public-Private Key Pair . Create a CA profile. See Configuring a Certificate Authority Profile. Generate a certificate request. See Generating a Local Certificate Request Manually . For background information, read Public Key Cryptography for Certificates Understanding Certificates Understanding Certificate Revocation Lists Using Digital Certificates

Before You Begin

You can load the following certificates files onto a device running JUNOS software:

A local or end-entity (EE) certificate that identifies your local device. This certificate is your public key.
A CA certificate that contains the CA's public key.
A CRL that lists any certificates revoked by the CA.

Note: You can load multiple EE certificates onto the device.

This topic covers: