230
Use
undo certificate request mode
to restore the default.
Syntax
certificate request mode
{
auto
[
key-length
key
-
length
|
password
{
cipher
|
simple
}
password
]
*
|
manual
}
undo certificate request mode
Default
Manual mode is used.
Views
PKI domain view
Default command level
2: System level
Parameters
auto
: Requests a certificate in auto mode.
key
-
length
: Specifies the length of the RSA keys in bits. The value range is 512 to 2048, and the
default is 1024.
cipher
: Sets a ciphertext password for certificate revocation.
simple
: Sets a plaintext password for certificate revocation.
password
: Specifies the password string. This argument is case sensitive. If
simple
is specified, it
must be a string of 1 to 31 characters. If
cipher
is specified, it must be a ciphertext string of 1 to 73
characters.
manual
: Requests a certificate in manual mode.
Usage guidelines
In auto mode, an entity automatically requests a certificate from an RA or CA when it has no
certificate. However, if the certificate will expire or has expired, the entity does not initiate a
re-request automatically, in which case you need to request a new one manually. In manual mode, all
operations associated with certificate request are performed manually.
For security purposes, all passwords, including passwords configured in plain text, are saved in
cipher text to the configuration file.
Examples
# Specify to request a certificate in auto mode.
<Sysname> system-view
[Sysname] pki domain 1
[Sysname-pki-domain-1] certificate request mode auto
Related commands
pki request-certificate
certificate request polling
Use
certificate request polling
to specify the certificate request polling interval and attempt limit.
Use
undo certificate request polling
to restore the defaults.
Syntax
certificate request polling
{
count
count
|
interval
minutes
}
undo certificate request polling
{
count
|
interval
}
