request security pki local-certificate generate-self-signed
certificate-id certificate-id-name
domain-name domain-name subject subject-distinguished-name
<email email-address>
<ip-address ip-address>
Command introduced in Release 9.1 of JUNOS software with enhanced services.
Manually generate a self-signed certificate for the given distinguished name.
This statement is supported on J-series and SRX-series devices.
certificate-id certificate-id-name—Name of the certificate and the public/private key pair.
domain-name domain-name—Fully qualified domain name (FQDN). The FQDN provides the identity of the certificate owner for Internet Key Exchange (IKE) negotiations and provides an alternative to the subject name.
subject subject-distinguished-name—Distinguished name format that contains the common name, department, company name, state, and country in the following format: CN, OU, O, ST, C
email email-address—E-mail address of the certificate holder.
ip-address ip-address—IP address of the routing platform.
maintenance and security
clear security pki local-certificate
show security pki local-certificate
When you enter this command, you are provided feedback on the status of your request.
user@host> request security pki local-certificate
generate-self-signed certificate-id self-cert subject cn=abc domain-name
juniper.net email mholmes@juniper.net
Self-signed certificate generated and loaded successfully