Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


request security pki key-pair export



Export the keypair for an end-entity (EE) certificate. The exported keypair is encrypted and can be imported along with the EE certificate. Using the CLI request security pki key-pair export command, you can export the pki key-pairs file as a backup or to check the file for troubleshooting purposes. We recommend denying access to the CLI request security pki key-pair export command to all users and restrict this command only to the privileged users.


certificate-id certificate-id

Name of the local digital certificate.

filename filename

Target directory location and filename of the CA digital certificate.

passphrase passphrase

(Optional) Passphrase to protect the keypair data for PEM format. The passphrase can be up to 64 characters. If specified, the passphrase must be used when importing the keypair.

type (der | pem)

(Optional) Type of format, either DER or PEM. PEM is the default.

Required Privilege Level


Output Fields

This command produces no output.

Release Information

Command introduced in Junos OS Release 15.1X49-D60.