pki get-certificate

Function

The pki get-certificate command downloads a certificate to the device storage.

Format

pki get-certificate ca realm realm-name

Parameters

Parameter	Description	Value
ca	Specifies a CA or RA certificate to be obtained.	-
realm realm-name	Specifies the PKI realm name of a certificate to be obtained.	The value must be an existing PKI realm name.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When you request a local certificate for the PKI entity through SCEP, run this command to download a CA certificate to the device storage, and request a local certificate using the encrypted CA public key.

Prerequisites

A PKI realm has been created using the pki realm (system view) command.

Example

# Obtain the CA certificate in the PKI realm abc.

<sysname> system-view
[sysname] pki realm abc
[sysname-pki-realm-abc] quit
[sysname] pki get-certificate ca realm abc