crypto certificate signing-request csr-name <csr-name> generate

Prev Next

Creates a named crypto certificate signing request (CSR).

Syntax

[no] crypto certificate signing-request csr-name <name> generate [common-name <common_name>] [country-code <code>] [email-addr <addr>] [key-size-bits <bits>] [locality <locality_name>] [org-unit <unit_name>] [organization <org_name>] [overwrite] [state-or-prov <state_or_prov>]

Parameters

no

The no form of this command deletes the CSR.

csr-name

The name of the certificate signing request.

common_name

The issuer and subject common name, such as a domain name.

code

The country code.

addr

Email address.

bits

The size of the private key in bits (RSA only). The size should be at least 1024, and 2048 is strongly recommended.

locality_name

The name of the locality, such as Boston.

unit_name

The organizational unit name, such as town or county.

org_name

The organization name.

overwrite

Overwrite any existing CSR by this name. The existing private key will be lost.

state_or_prov

The state or province name.

Example

The following example regenerates the specified public certificate.

hostname (config) # crypto certificate signing-request csr-name my-csr common-name example.com country-code NZ locality Smallville overwrite

User role

Admin

Command mode

Config

Supported appliances

This command is supported on the following appliances running the specified releases or later:

  • Central Management System: Release 7.8

  • Malware Analysis: Release 7.8

  • Email Security — Server: Release 7.8

  • File Protect: Release 7.8

  • Network Security: Release 7.8

  • Endpoint Security (HX): Release 3.4