User`s guide

139
crypto certificate (request)
Purpose To generate and display certificate requests for HTTPS.
Syntax
crypto certificate <number 1-2> request {cn <common-name 1-
64> | ou <organization-unit 1-64>| or <organization 1-64> | loc
<location 1-64> | st <state 1-64>| cu <country 1-2>
Description The crypto certificate (request) command exports a certificate
request to a Certification Authority. The certificate request is
generated in Base64-encoded X.509 format. Before generating a
certificate request you must first generate a self-signed certificate
using the crypto certificate generate Global Configuration mode
command. Be aware that you have to reenter the certificate fields.
After receiving the certificate from the Certification Authority, use the
crypto certificate import Global Configuration mode command to
import the certificate into the device. This certificate replaces the
self-signed certificate.
Parameters number — Specifies the certificate number (Range: 1 - 2).
common-name — Specifies the fully qualified URL or IP address of
the device (Range: 1- 64).
organization-unit — Specifies the organization-unit or department
name (Range: 1- 64).
organization — Specifies the organization name (Range: 1- 64).
location — Specifies the location or city name (Range: 1- 64).
state — Specifies the state or province name (Range: 1- 64).
country — Specifies the country name (Range: 1- 2).
Restrictions Only administrator-level users can issue this command.
Example usage:
To generate and display certificate requests for HTTPS.:
DGS3100# crypto certificate 1 request
-----BEGIN CERTIFICATE REQUEST-----
MIIBDTCBuAIBADBTMQswCQYDVQQGEwIgIDEKMAgGA1UECBMBIDEKMAgGA1UEBxMB
IDEUMBIGA1UEAxMLMTAuNi4yMi4xMTQxCjAIBgNVBAoTASAxCjAIBgNVBAsTASAw
XDANBgkqhkiG9w0BAQEFAANLADBIAkEAw3odbbo5S4JPRz2QJKoEpTmve8WDdsm4
0nvmOpxqUDORl7TigrZfs3vGxg2Nar1RflQwKQxb7VetgxF8VeKmDQIDAQABoAAw
DQYJKoZIhvcNAQEEBQADQQB1owjB21fZvIYdBS1zJl/Hd6F2MhrzF35ULNgNHP0Z
pbtU7Y4HkyqsQzkCwDAzGD+y4YB/mu4jNxeq+Ik2UEYD
-----END CERTIFICATE REQUEST-----
Success.
DGS3100#