Generates a self-signed X.509 certificate.
Syntax
crypto certificate name <cert-name> generate self-signed [key-size-bits <bits>] [serial-num <serial_number>] [days-valid <days>] [common-name <common_name>] [country-code <country_code>] [state-or-prov <state_or_province_name>] [locality <locality_name>] [organization <organization_name>] [org-unit <org_unit_name>] [email-addr <email_address>] [comment <comment>]
Parameters
cert_name
The name of a public certificate, or system-self-signed.
comment
A comment about the certificate.
common_name
The hostname or fully qualified domain name.
country_code
The default country code for the certificate. A two-character code, or “- - ” for none.
days
The default duration for which the certificate is valid in days.
email_addr
The default email address associated with the certificate.
bits
The size of the private key in bits. The size should be at least 1024, and 2048 is strongly recommended.
locality
The default value for the certificate’s locality, for example, city or town.
org-unit
The default value for the certificate’s organizational unit name.
organization
The default value for the certificate’s organization.
serial-num
A lowercase, hexadecimal serial number prefixed with '0x'.
state-or-prov
The default value for the certificate’s state or province.
Example
The following example generates a self-signed certificate.
hostname (config) # crypto certificate name my-cert generate self-signed common-name example.com days-valid 21 key-size-bits 2048
User role
Admin
Command mode
Config
Supported appliances
This command is supported on the following appliances running the specified releases or later:
Central Management System: Before Release 7.6
Malware Analysis: Before Release 7.6
Email Security — Server: Before Release 7.6
File Protect: Before Release 7.6
Network Security: Before Release 7.6
Endpoint Security (HX): Before Release 3.0