1-8Follow these steps to configure an entity to submit a certificate request in auto mode:To do… Use the command… RemarksEnter system view system-view —Enter PKI domain view pki domain domain-name —Set the certificate requestmode to autocertificate request mode auto[ key-length key-length |password { cipher | simple }password ] *RequiredManual by defaultSubmitting a Certificate Request in Manual ModeIn manual mode, you need to retrieve a CA certificate, generate a local RSA key pair, and submit a localcertificate request for an entity.The goal of retrieving a CA certificate is to verify the authenticity and validity of a local certificate.Generating an RSA key pair is an important step in certificate request. The key pair includes a publickey and a private key. The private key is kept by the user, while the public key is transferred to the CAalong with some other information.Follow these steps to submit a certificate request in manual mode:To do… Use the command… RemarksEnter system view system-view —Enter PKI domain view pki domain domain-name —Set the certificate requestmode to manualcertificate request modemanualOptionalManual by defaultReturn to system view quit —Retrieve a CA certificatemanuallyRefer to Retrieving a CertificateManually RequiredGenerate a local RSA key pair public-key local create rsaRequiredNo local RSA key pair exists bydefault.Submit a local certificaterequest manuallypki request-certificatedomain domain-name[ password ] [ pkcs10[ filename filename ] ]Required
