Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation

request security certificate (unsigned)

Syntax

request security certificate enroll filename filename ca-file ca-file ca-name ca-name encoding (binary | perm) url url

Release Information

Command introduced before Junos OS Release 7.4.

Command introduced in Junos OS Release 9.0 for EX Series switches.

Description

(Encryption interface on M Series and T Series routers and EX Series switches only) Obtain a certificate from a certificate authority (CA). The results are saved in a specified file to the /var/etc/ikecert directory.

Options

filename filename

File that stores the public key certificate.

ca-file ca-file

Name of the certificate authority profile in the configuration.

ca-name ca-name

Name of the certificate authority.

encoding (binary | pem)

File format used for the certificate. The format can be a binary file or privacy-enhanced mail (PEM), an ASCII base64-encoded format. The default value is binary.

url url

Certificate authority URL.

Required Privilege Level

maintenance

List of Sample Output

request security certificate (unsigned)

Output Fields

When you enter this command, you are provided feedback on the status of your request.

Sample Output

request security certificate (unsigned)

user@host> request security certificate enroll filename ca_verisign ca-file verisign ca-name juniper.net urlxyzcompany URL
http://<verisign ca-name xyzcompany url>/cgi-bin/pkiclient.exe CA name: juniper.net CA file: verisign Encoding: binary 
Certificate enrollment has started. To view the status of your enrollment, check the key management process (kmd) log file at /var/log/kmd. <-------------- 

Published: 2013-03-14

Supported Platforms

Published: 2013-03-14