Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


request security pki generate-certificate-request



Manually generate a local digital certificate request in the Public-Key Cryptography Standards #10 (PKCS-10) format.


certificate-id certificate-id-name

Name of the local digital certificate and the public/private key pair.

domain-name domain-name

Fully qualified domain name (FQDN). The FQDN provides the identity of the certificate owner for Internet Key Exchange (IKE) negotiations and provides an alternative to the subject name.

subject subject-distinguished-name

Distinguished name format that contains the common name, department, company name, state, and country:

  • CN—Common name

  • OU—Organizational unit name

  • O—Organization name

  • ST—State

  • C—Country

email email-address

(Optional) E-mail address of the certificate holder.

filename (path | terminal)

(Optional) Location where the local digital certificate request should be placed or the login terminal.

ip-address ip-address

(Optional) IP address of the router.

Required Privilege Level


Output Fields

When you enter this command, you are provided feedback on the status of your request.

Sample Output

request security pki generate-certificate-request

Release Information

Command introduced in Junos OS Release 7.5.