Example: Manually Generating Self-Signed Certificates (CLI)
For a manually generated self-signed certificate, you specify the DN when you create it. (For an automatically generated self-signed certificate, the system supplies the DN, identifying itself as the creator.)
Use the following CLI command to manually generate a self-signed certificate created and signed by the user whose e-mail address is mholmes:
user@host# request security pki local-certificate
generate-self-signed certificate-id self-cert
subject cn=abc domain-name Juniper.net ip-address 1.2.3.4 email mholmes@juniper.net
Use the following CLI command to direct the device to use a manually generated self-signed certificate called self-cert for Web management:
user@host# set system services web-management
https pki-local-certificate self-cert
Related Topics
- Junos OS Feature Support Reference for SRX Series and J Series Devices
- Understanding Self-Signed Certificates
- Using Automatically Generated Self-Signed Certificates (CLI Procedure)
Hide Navigation Pane
Show Navigation Pane
Download
SHA1