pki import built-in-ca rsa-key-pair

Function

The pki import built-in-ca rsa-key-pair command imports an RSA key pair in an SSL decryption certificate to the device memory.

Format

pki import built-in-ca rsa-key-pair key-name { pem | pkcs12 } file-name [ exportable ] password password

Parameters

Parameter	Description	Value
key-name	Specifies the name of the RSA key pair on the device.	The value is a string of 1 to 64 characters and case-sensitive without spaces or question marks (?). If the character string is enclosed in double quotation marks (" "), the character string can contain spaces and question marks.
pem file-name	Specifies the format of the imported RSA key pair as PEM, and specifies the name of the RSA key pair file. When the file contains a certificate, the device will also import the certificate.	The value must be an existing certificate file name.
pkcs12 file-name	Specifies the format of the imported RSA key pair as PKCS12, and specifies the name of the RSA key pair file. When the file contains a certificate, the device will also import the certificate.	The value must be an existing certificate file name.
exportable	Specifies the imported RSA key pair as exportable.	-
password password	Specifies the decryption password of the RSA key pair. The password is the same as the password configured using the pki export built-in-ca rsa-key-pair command.	The value must be the name of an existing decryption password of the RSA key pair.

Views

System view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

When using the DSA key pair generated by other entities, store the RSA key pair on the CF card or Hda1 of the local device. To make the RSA key pair take effect, run this command to import it to the memory.

Prerequisites

The RSA key pair must already exist on the storage device.

Precautions

Before importing a certificate or key pair, ensure that the certificate or key pair is stored in the specified directory (public directory on the root system and vsys directory on the virtual system). For example, the certificate or key pair is in the public directory of the root system:

<sysname> cd pki
<sysname> cd public/

Example

# Import the RSA key pair aaa.pem. In the system, the RSA key pair is named key-1, has the decryption password YsHsjx_202206, and is marked exportable.

<sysname> system-view
[sysname] pki import built-in-ca rsa-key-pair key-1 pem aaa.pem exportable password YsHsjx_202206
 Info: Succeeded in importing the RSA key pair in PEM format.