Operation Manual – PKI
H3C S3610&S5510 Series Ethernet Switches
Chapter 1 PKI Configuration
1-9
Follow these steps to configure an entity to submit a certificate request in auto mode:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Enter PKI domain view
pki domain domain-name
—
Set the certificate request
mode to auto
certificate request mode auto
[
key-length key
-
length
|
password
{
cipher
|
simple
}
password
] *
Required
Manual by
default
1.5.2 Submitting a Certificate Request in Manual Mode
In manual mode, you need to retrieve a CA certificate, generate a local RSA key pair,
and submit a local certificate request for an entity.
The goal of retrieving a CA certificate is to verify the authenticity and validity of a local
certificate.
Generating an RSA key pair is an important step in certificate request. The key pair
includes a public key and a private key. The private key is kept by the user, while the
public key is transferred to the CA along with some other information. For detailed
information about RSA key pair configuration, refer to
SSH Configuration
.
Follow these steps to submit a certificate request in manual mode:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Enter PKI domain view
pki domain
domain-name
—
Set the certificate request
mode to manual
certificate request mode
manual
Optional
Manual by default
Return to system view
quit
—
Retrieve a CA certificate
manually
Required
Generate a local RSA key
pair
public-key local create rsa
Required
No local RSA key pair
exists by default.
Submit a local certificate
request
pki request-certificate
domain domain-name
[
password
] [
pkcs10
[
filename
filename
] ]
Required
