[Contents] [Prev] [Next] [Index] [Report an Error]

Specifying the CA Profile Name

The CA profile contains the name and URL of the CA or RA, as well as some retry-timer settings. CA certificates issued by Entrust, VeriSign, Cisco Systems, and Microsoft are compatible with the J-series Services Routers and AS and MultiServices PICs installed in the M-series and T-series routing platforms.

To specify the CA profile name, include the ca-profile statement at the [edit security pki] security level:

[edit security pki]
ca-profile ca-profile-name;

You also need to specify the name of the CA identity used in the certificate request. This name is typically the domain name. To specify the name of the CA identity, include the ca-identity statement at the [edit security pki ca-profile ca-profile-name] level:

[edit security pki ca-profile ca-profile-name]
ca-identity ca-identity;

[Contents] [Prev] [Next] [Index] [Report an Error]