Installs a public certificate with options.
Syntax
crypto certificate name <name> public-cert [name <name>] [comment <comment>] [match-ca-chain <chain_name>] [match-csr-name <csr_name> [delete-csr]] [pem <quoted_pem_string>]
Parameters
name
The name of a public certificate, or system-self-signed.
comment
Specify the certificate comment.
chain_name
Match this certificate with a CA certificate chain.
csr_name
Match this certificate with a signing request and use its private key.
quoted_PEM_string
Specifies the certificate as a PEM formatted string.
delete-csr
Delete the matching CSR from configuration. Only used with the match-csr-name parameter.
PEM String Format
The certificate and private key must be configured as a Privacy Enhanced Email (PEM) encrypted ASCII string. The string must be formatted in the following order:
Double quotation marks
A new line
BEGIN delimiter string
ASCII block
END delimiter string
A new line
Double quotation marks
Note
You can press Enter in the CLI to add a new line.
If a comment is added, it must follow the final double quotation marks and be on the same line. Any commentary outside the BEGIN and END delimiter strings is ignored.
The following is an example PEM string (with a truncated ASCII block):
>" > >----BEGIN CERTIFICATE----- >MIIEujCCA6KgAwIBAgIJAI/1cFcdOeykMA0GCSqGSIb3DQEBBQ >UAMIGZMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5p >YTERMA8GA1UEBxMITWlscGl0YXMTJDE3GDS9DYEDLO9EWS6Fx= >. >. >. >----END CERTIFICATE----- > >"
Example
The following example installs the specified public certificate.
hostname (config) # crypto certificate name cert12345 public-cert match-csr-name csr789
User role
Admin
Command mode
Config
Supported appliances
This command is supported on the following appliances running the specified releases or later:
Central Management System: Before Release 7.6
Malware Analysis: Before Release 7.6
Email Security — Server: Before Release 7.6
File Protect: Before Release 7.6
Network Security: Before Release 7.6
Endpoint Security (HX): Before Release 3.0