certificate
-----------

.. osdx:cfgcmd:: system certificate

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Digital certificates configuration






.. osdx:cfgcmd:: system certificate scep

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Simple Certificate Enrollment Protocol configuration






.. osdx:cfgcmd:: system certificate scep csr <id>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    SCEP server name

    :arg id:
        Server name (1-32)


    :instances: Multiple

    :ref Required: 
    :ref Required: 


.. osdx:cfgcmd:: system certificate scep csr <id> autoenrollment

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Enable autoenrollment






.. osdx:cfgcmd:: system certificate scep csr <id> autoenrollment retry-period <u32|id>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Wait period between certificate request retries

    :arg u32:
        Time in minutes (1-999999)
    :arg N[m/h/d/w]:
        Time in minutes/hours/days/weeks





.. osdx:cfgcmd:: system certificate scep csr <id> autoenrollment time <u32|id>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Time before certificate expiration

    :arg u32:
        Time in minutes (1-999999)
    :arg N[m/h/d/w]:
        Time in minutes/hours/days/weeks





.. osdx:cfgcmd:: system certificate scep csr <id> ca-fingerprint

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Expected fingerprint for the CA certificate



    :instances: Unique



.. osdx:cfgcmd:: system certificate scep csr <id> ca-fingerprint md5 <id>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    MD5 fingerprint

    :arg id:
        MD5 fingerprint in hex format (16)





.. osdx:cfgcmd:: system certificate scep csr <id> ca-fingerprint sha <id>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    SHA fingerprint

    :arg id:
        SHA fingerprint in hex format (20)





.. osdx:cfgcmd:: system certificate scep csr <id> ca-name <id>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>


    :arg id:
        CA name





.. osdx:cfgcmd:: system certificate scep csr <id> cert-renew-via-renewalreq

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Perform certificate renewal via msgType RenewalReq instead of PKCSReq






.. osdx:cfgcmd:: system certificate scep csr <id> cgi-path <txt>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>


    :arg txt:
        CGI script path





.. osdx:cfgcmd:: system certificate scep csr <id> challenge-password <txt>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Challenge password CSR request of enrollment

    :arg txt:
        Password (1-256)





.. osdx:cfgcmd:: system certificate scep csr <id> distinguished-names <txt>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Comma separated list of distinguished names for the CSR

    :arg txt:
        DN (1-250)





.. osdx:cfgcmd:: system certificate scep csr <id> dns <id>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Add DNS name as alternative name

    :arg id:
        Domain Name System





.. osdx:cfgcmd:: system certificate scep csr <id> email <id>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Add email as alternative name

    :arg id:
        Email





.. osdx:cfgcmd:: system certificate scep csr <id> encrypted-password <password>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>


    :arg password:
        Encrypted challenge password CSR request of enrollment





.. osdx:cfgcmd:: system certificate scep csr <id> ip-address <ipv4|ipv6>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Add source IP address as alternative name

    :arg ipv4:
        Local IPv4 address
    :arg ipv6:
        Local IPv6 address

    :Local IP address:




.. osdx:cfgcmd:: system certificate scep csr <id> local-address <ipv4|ipv6>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Local IP address to use as source for SCEP requests

    :arg ipv4:
        Local IPv4 address for csr
    :arg ipv6:
        Local IPv6 address for csr

    :Local IP address:




.. osdx:cfgcmd:: system certificate scep csr <id> local-interface <ifc>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>


    :arg ifc:
        Interface to use as source for SCEP requests





.. osdx:cfgcmd:: system certificate scep csr <id> local-vrf <id>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    VRF where socket is bound



    :ref Reference: system vrf *



.. osdx:cfgcmd:: system certificate scep csr <id> port <u32>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    SCEP server port

    :arg u32:
        Port (1-65535)





.. osdx:cfgcmd:: system certificate scep csr <id> regenerate-key

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Regenerate key on enrollment






.. osdx:cfgcmd:: system certificate scep csr <id> rollover

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Enable rollover for CA expiration






.. osdx:cfgcmd:: system certificate scep csr <id> rollover retry-period <u32|id>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Wait period between rollover retries

    :arg u32:
        Time in minutes (1-999999)
    :arg N[m/h/d/w]:
        Time in minutes/hours/days/weeks





.. osdx:cfgcmd:: system certificate scep csr <id> rollover time <u32|id>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Time before CA expiration

    :arg u32:
        Time in minutes (1-999999)
    :arg N[m/h/d/w]:
        Time in minutes/hours/days/weeks





.. osdx:cfgcmd:: system certificate scep csr <id> rsa-key-length <u32>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    RSA key length in bits to generate

    :arg u32:
        Key length (512-4096)





.. osdx:cfgcmd:: system certificate scep csr <id> serial-number

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Add router serial number to the CSR






.. osdx:cfgcmd:: system certificate scep csr <id> signer-names <txt>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    Comma separated list of distinguished names for the PKCS#7 envelop

    :arg txt:
        DN (1-250)





.. osdx:cfgcmd:: system certificate scep csr <id> url <ipv4|ipv6|txt>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>

    SCEP server address

    :arg ipv4:
        SCEP IPv4 address
    :arg ipv6:
        SCEP IPv6 address
    :arg txt:
        SCEP hostname





.. osdx:cfgcmd:: system certificate trust <file>

    .. raw:: html

        <span class="badge" style="background-color: rosybrown">AresC640</span>
        <span class="badge" style="background-color: darkolivegreen">Atlas840</span>
        <span class="badge" style="background-color: steelblue">M10-Smart</span>
        <span class="badge" style="background-color: goldenrod">M2</span>
        <span class="badge" style="background-color: firebrick">RS420</span>
        <span class="badge" style="background-color: darkkhaki">RXL15000</span>
        <span class="badge" style="background-color: lightslategray">SDE</span>


    :arg file:
        Add a certificate to the trusted root certificates


    :instances: Multiple