R0106-HP MSR Router Series Security Command Reference(V7)

248
querying the certificate request status after it obtains the certificate or if the maximum number of query
attempts is reached. The latter case means the certificate request fails.
If the CA server automatically issues certificates, the PKI entity can obtain the certificate immediately after
it submits a certificate request. In this case, the PKI entity does not send queries to the CA server.
Examples
# Set the polling interval to 15 minutes, and the maximum number of query attempts to 40.
<Sysname> system-view
[Sysname] pki domain aaa
[Sysname-pki-domain-aaa] certificate request polling interval 15
[Sysname-pki-domain-aaa] certificate request polling count 40
Related commands
display pki certificate request-status
certificate request url
Use certificate request url to specify the URL of the registration server for certificate request through the
SCEP protocol.
Use undo certificate request url to remove the configuration.
Syntax
certificate request url url-string [ vpn-instance vpn-instance-name ]
undo certificate request url
Default
The URL of the registration server is not specified.
Views
PKI domain view
Predefined user roles
network-admin
Parameters
url-string: Specifies the URL of the registration server for certificate request, a case-sensitive string of 1 to
511 characters.
vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the registration server
belongs, where the vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If the
registration server is on the public network, do not specify this option.
Usage guidelines
The specified URL contains the location of the server and the location of CGI command interface script
in the format of http://server_location/ca_script_location, where:
• server_location can be an IPv4 address, IPv6 address, or a domain name.
• cgi_script_location is the path of the application script on the registration server (CA or RA server).
The actual length of the URL is restricted by the CLI or the url-string parameter, whichever is smaller.