Command Reference Guide

3Com Router 3000 Ethernet Family
Command Reference Guide
Chapter 7 PKI Configuration Commands
3Com Corporation
7-16
Description
Use the pki request-certificate command to deliver certificate request through SCEP
to CA for the generated RSA key pair. If SCEP fails to go through normal
communication, you can print the local certificate request in base64 format using the
optional parameter PKCS#10, copy it, and send one to CA in an outband mode.
This operation is not saved within the configuration.
Related command: pki domain.
Example
# Specify to manually apply for a certificate and display the PKCS#10 certificate
request information.
[3ComCA] pki request-certificate domain 1 pkcs10
7.3.4 pki retrieval-certificate
Syntax
pki retrieval-certificate { local | ca } domain domain-name
View
System view
Parameter
local: indicates the download of a local certificate;
ca: indicates the download of a CA certificate;
domain-name: contains CA or RA related information. It is configured by using the pki
domain command.
Description
Use the pki retrieval-certificate command to download a certificate from the
certificate issuing server.
Related command: pki domain.
Example
# Retrieve a certificate.
[RouterCA] pki retrieval-certificate ca domain 1
7.3.5 pki retrieval-crl
Syntax
pki retrieval-crl domain domain-name