Press CTRL+K to open search

crypto certificate bundle ＜bundle_name＞ fetch url ＜url＞

  • Published on Aug 4, 2026
  • 1 minute(s) read
Prev Next

Downloads a CA certificate bundle and adds an imported certificate to an existing bundle from a specified URL.

The bundle must be a single concatenated PEM file. Each certificate is imported into the bundle configuration. The imported certificates are listed in the specified bundle.

By default, if the bundle name already exists, it will be replaced with an imported certificate.

For details about how to configure a CA certificate bundle, refer to the "Configuring CAC for Certificate Authentication" appendix of the System Administration Guide.

Note

This command is not currently used on the Intelligent Virtual Execution - Server compute node.

Syntax

crypto certificate bundle <bundle_name> fetch url <URL> [append] [keep-member-certs]

Parameters

bundle_name

Name of the certificate bundle. The bundle must be named client-cert-auth.

Note

If you do not specify the remote host administrator password in the crypto certificate bundle fetch url command (where the password would be visible as clear text), the CLI prompts for the password and obfuscates the keyboard input as you type it.

URL

Direct path to the certificate file. The <url> is specified with remote server Administrator credentials (<username> and <password>), the remote server (<hostname>), the path and filename in which to save the certificate bundle (<path/filename>) in the following format: scp://<username>[:<password>]@<hostname>/<path/filename>

append

(Optional) Adds a new certificate to an existing certificate bundle. The existing certificates will be retained in the database.

keep-member-certs

(Optional) Removes the certificates from the specified bundle but keeps them in the database.

Example

The following example shows how to download a certificate bundle.

hostname (config) # crypto certificate bundle client-cert-auth fetch url http://172.16.142.99/QA/test/cac/vps1-cacerts.pem

User role

Admin

Command mode

Config

Supported appliances

This command is supported on the following appliances running the specified releases or later:

  • Central Management System: Release 7.9.1

  • Malware Analysis: Release 7.9.0

  • Email Security — Server: Release 7.9.0

  • File Protect: Release 7.9.0

  • Network Security: Release 7.9.1

  • Intelligent Virtual Execution - Server: Release 7.9.1

Related articles