trusted-ca

Syntax

trusted-ca ( ca-index | use-all);

Hierarchy Level

[edit security group-vpn member ike policy policy-name certificate][edit security group-vpn server ike policy policy-name certificate][edit security ike policy policy-name certificate]

Release Information

Statement introduced in Release 8.5 of Junos OS. Support for group-vpn hierarchies added in Junos OS Release 10.2.

Description

Specify the preferred certificate authority (CA) to use when requesting a certificate from the peer. If no value is specified, then no certificate request is sent (although incoming certificates are still accepted). (This statement is not supported on dynamic VPN implementations.)

Options

ca-index —Preferred certificate authority ID for the device to use.
use-all—Device uses all configured certificate authorities.

Usage Guidelines

For configuration instructions and examples, see the Junos OS Security Configuration Guide.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.