CA certificates can be requested either manually or online. To request a certificate online, you can use the Simple Certificate Enrollment Protocol (SCEP) to contact the CA.
You can request a CA certificate in CLI operational mode only. To request a CA certificate:
Table 42: Requesting a CA Certificate from a CA
|
Task |
CLI Operational Mode |
|---|---|
|
Using the CA profile ca-profile-ipsec configured in Table 41, contact the CA to request a CA certificate. |
Enter request security pki ca-certificate enroll ca-profile ca-profile-ipsec |