Generate Certificate Signing Request from the CLI

To generate a certificate signing request on the Makito X  Series via the CLI, do the following:

1. Enter the following command:
   $ certificate name create [sign=request] [subject=[auto|query|DN]]
   

   Example:
   

   JS

   $ certificate MakitoX2 create sign=request subject=auto 
   Generating a 2048 bit RSA private key
   ...................................................... +++
   ...................................................... +++
   writing new private key to '/etc/ssl/identity/test01.key'
   -----
   Certificate successfully created. 
   Certificate signing request has been copied to your account home directory in Makito X2.csr
   
   

2. After the CSR is generated (via the Web Interface or CLI), follow your organization's procedure for submitting this request to a recognized Certificate Authority.

3. Once you have received the signed certificate,  install it on the Makito X as described in Installing a Certificate , using the same name under which the CSR was created.

Note

There is a difference between importing a new CA-signed certificate that was generated elsewhere, and one that was generated from a CSR on the device (as shown above). In the first case, you can give the certificate any name that doesn't already exist on the encoder. In the second, the signed certificate must have the same name used to generate the corresponding CSR (so that it matches the private key generated concurrently with the CSR file).

For more information see "Managing Certificates" and the CLI Command Reference in the associated User's Guide.