10-8Submitting a Certificate Request in Auto ModeIn auto mode, an entity automatically requests a certificate through the SCEP protocol when it has nolocal certificate or the present certificate is about to expire.Follow these steps to configure an entity to submit a certificate request in auto mode:To do… Use the command… RemarksEnter system view system-view —Enter PKI domain view pki domain domain-name —Set the certificate requestmode to autocertificate request mode auto[ key-length key-length | password{ cipher | simple } password ] *RequiredManual by defaultSubmitting a Certificate Request in Manual ModeIn manual mode, you need to retrieve a CA certificate, generate a local RSA key pair, and submit alocal certificate request for an entity.The goal of retrieving a CA certificate is to verify the authenticity and validity of a local certificate.Generating an RSA key pair is an important step in certificate request. The key pair includes a publickey and a private key. The private key is kept by the user, while the public key is transferred to the CAalong with some other information. For detailed information about RSA key pair configuration, refer toPublic Key Configuration in the Security Volume.Follow these steps to submit a certificate request in manual mode:To do… Use the command… RemarksEnter system view system-view —Enter PKI domain view pki domain domain-name —Set the certificate requestmode to manualcertificate request modemanualOptionalManual by defaultReturn to system view quit —Retrieve a CA certificatemanuallyRefer to Retrieving a CertificateManually RequiredGenerate a local RSA key pair public-key local create rsaRequiredNo local RSA key pair exists bydefault.Submit a local certificaterequest manuallypki request-certificatedomain domain-name[ password ] [ pkcs10[ filename filename ] ]Required
