P K I A N D X . 5 0 9 / D I G I T A L C E R T I F I C A T E S
CLI Commands
12-6
Security Appliance User Guide
Version 3R2
1 2
The complete output needs to be copied and pasted on a PKCS10 based
certificate enrollment webpage or provider to the CA in expected format.
IMPORTING A CERTIFICATE
The CA will issue a certificate based on the certificate request that we
provided. This certificate can be imported into the appliance as follows:
exec pki x509 tftp 192.168.65.197 cert-name test.crt
The IP Address needs to be replaced by the IP Address of the TFTP
server where the file is available and the test.crt should be replaced with
the actual file name for the certificate
USING A CERTIFICATE FOR A VPN TUNNEL
The following commands are available to assign certificate authentication
for an IKE Gateway:
set ike gateway test cert mycert 2 peer_cacert all
peer_cert_type pkcs7
• The command assumes that the IKE gateway test is already created
with the correct proposals.
• The mycert variable provides the cert to be used with this gateway.
• The peer_cacert all means that the peer can use a CA cert issued by
any of the Cas configured on our system
• The peer_cert_type is the type of CA certificate that we are expecting
the peer to send us.
