TechLibrary

Navigation

Supported Platforms

To manually generate a self-signed SSL certificate on Juniper Networks devices:

Establish basic connectivity.
If you have root login access, you can manually generate the self-signed certificate by using the following commands:
root@host> request security pki generate-size 512 certificate-id certname
```
 
Generated key pair sslcert, key size 512 bits
```
root@host> request security pki local-certificate generate-self-signed certificate-id cert-name email email domain-name domain-name ip-address ip-address subject “DC= Domain name, CN= Common-Name, OU= Organizational-Unit-name, O= Organization-Name, ST= state, C= Country”
```
 
Self-signed certificate generated and loaded successfully
```
Note: When generating the certificate, you must specify the subject, e-mail address, and either domain-name or ip-address.
Specify local-certificate under HTTPS Web management.
[edit]root@host# show system services web-management https local-certificate certname