Example: Manually Generating Self-Signed Certificates (CLI)

For a manually generated self-signed certificate, you specify the DN when you create it. (For an automatically generated self-signed certificate, the system supplies the DN, identifying itself as the creator.)

Use the following CLI command to manually generate a self-signed certificate created and signed by the user whose e-mail address is mholmes:

user@host# request security pki local-certificate generate-self-signed certificate-id self-cert subject cn=abc domain-name Juniper.net ip-address 1.2.3.4 email mholmes@juniper.net

Use the following CLI command to direct the device to use a manually generated self-signed certificate called self-cert for Web management:

user@host# set system services web-management https pki-local-certificate self-cert

Related Topics