request security pki generate-key-pair (Security)

Name of the local digital certificate and the public/private key pair.

Key pair size. The key pair size can be 256, 384, 521, 1024, 2048, or 4096 bits. Key pair sizes of 256, 384, and 521 bits are compatible with ECDSA. For Digital Signal Algorithm (DSA) and Rivest Shamir Adleman (RSA), algorithms the size must be 1024, 2048, or 4096. The default key pair size is 1024 for DSA and 2048 for RSA.

The following are supported when ECDSA-521 signatures are used:

• Load a complete certificate, which is generated using an external tool like OpenSSL into PKI.

• Manually generate a Certificate Signing Request (CSR) for a local certificate and sending the CSR to a (Certificate Authority) CA server to enroll.

• Automatic enroll with CA server.

The algorithm to be used for encrypting the public/private key pair:

• ecdsa—ECDSA encryption

• dsa— DSA encryption

• rsa—RSA encryption (default)