How to generate a PKCS10 certificate request on a J Series or SRX Series device

Juniper

SUMMARY:
How to generate a PKCS10 certificate request on a J Series or SRX Series device
PROBLEM OR GOAL:

SOLUTION:


To request a PKI X.509 certificate follow the steps below using CLI:

1. Create a CA profile in security > pki hierarchy.Syntax:
[tip]set security pki ca-profile <ca-profile-name> ca-identity <CA-ID>[/tip]
Example:
[edit]
[tip]root@CORPORATE# set security pki ca-profile juniper-ca ca-identity TACLAB[/tip]

[edit]
[tip]root@CORPORATE# commit[/tip]
2. Generate a key pair.
Syntax:
[tip]request security pki generate-key-pair certificate-id <cert-id-name> size <size>[/tip] How to generate a PKCS10 certificate request on a J Series or SRX Series device