Nortel BCM50e, Configuration

Page: 271 / 311

Appendix H Command Interpreter 271
BCM50e Integrated Router Configuration - Advanced
create scep_enroll
<name> <CA
addr> <CA
cert> <auth
key>
<subject>
[key size]
Creates a certificate request and enrolls for a
certificate immediately online using SCEP protocol.
<name> specifies a descriptive name for the enrolled
certificate.
<CA addr> specifies the CA server address.
<CA cert> specifies the name of the CA certificate.
<auth key> specifies the key used for user
authentication. If the key contains spaces, put it in
quotes. To leave it blank, type "".
<subject> specifies a subject name (required) and
alternative name (required). The format is
"subject-name-dn;{ip,dns,email}=value". If the name
contains spaces, put it in quotes.
[key size] specifies the key size. It has to be an
integer from 512 to 2 048. The default is 1 024 bits.
create cmp_enroll
<name> <CA
addr> <CA
cert> <auth
key>
<subject>
[key size]
Creates a certificate request and enrolls for a
certificate immediately online using CMP protocol.
<name> specifies a descriptive name for the enrolled
certificate.
<CA addr> specifies the CA server address.
<CA cert> specifies the name of the CA certificate.
<auth key> specifies the id and key used for user
authentication. The format is "id:key". To leave the id
and key blank, type ":".
<subject> specifies a subject name (required) and
alternative name (required). The format is
"subject-name-dn;{ip,dns,email}=value". If the name
contains spaces, put it in quotes.
[key size] specifies the key size. It has to be an
integer from 512 to 2 048. The default is 1 024 bits.
import [name]
Imports the PEM-encoded certificate from stdin.
[name] specifies the descriptive name (optional) the
imported certificate is saved as. For my certificate
importation to be successful, a certification request
corresponding to the imported certificate must
already exist on Business Secure Router. After the
importation, the certification request is automatically
deleted. If a descriptive name is not specified for the
imported certificate, the certificate adopts the
descriptive name of the certification request.
export <name>
Exports the PEM-encoded certificate to stdout for
theuser to copy and paste.
<name> specifies the name of the certificate to be
exported.
Table 68 Certificates commands
Command Description