Obtaining certificates

About certificate obtaining

You can obtain the CA certificate, local certificates, and peer certificates related to a PKI domain from a CA and save them locally for higher lookup efficiency. To do so, use either the offline mode or the online mode:

Restrictions and guidelines

Follow these restrictions and guidelines when obtain certificates from a CA

Prerequisites

Procedure

  1. Enter system view.

    system-view

  2. Obtain certificates.

    • Import certificates in offline mode.

      pki import domain domain-name { der { ca | local | peer } filename filename | p12 local filename filename | pem { ca | local | peer } [ filename filename ] }

    • Obtain certificates in online mode.

      pki retrieve-certificate domain domain-name { ca | local | peer entity-name }

      This command is not saved in the configuration file.