CLI Operation

1. To generate a public-private key pair named, for example, ca-ipsec, with a key size of 1024 bits, enter the following command:

   user@host> request security pki generate-key-pair certificate-id ca-ipsec

   Note: The default RSA key size is 1024 bits. If you are using SCEP, JUNOS software with enhanced services supports RSA only.

2. Go on to Configuring a Certificate Authority Profile.