HP VPN Firewall Appliances VPN Command Reference

142
pki retrieval-certificate
Use pki retrieval-certificate to retrieve a certificate from the server for certificate distribution.
Syntax
pki retrieval-certificate { ca | local } domain domain-name
Views
System view
Default command level
2: System level
Parameters
ca: Retrieves the CA certificate.
local: Retrieves the local certificate.
domain-name: Name of the PKI domain used for certificate request.
Usage guidelines
The retrieved certificate is saved in the root directory of the device, with the file name
domain-name_ca.cer or domain-name_local.cer.
Examples
# Retrieve the CA certificate from the certificate issuing server.
<Sysname> system-view
[Sysname] pki retrieval-certificate ca domain 1
Related commands
pki domain
pki retrieval-crl domain
Use pki retrieval-crl domain to retrieve the latest CRLs from the server for CRL distribution.
Syntax
pki retrieval-crl domain domain-name
Views
System view
Default command level
2: System level
Parameters
domain-name: Name of the PKI domain, a string of 1 to 15 characters.
Usage guidelines
CRLs help verify the validity of certificates.
Examples
# Retrieve CRLs.