config vpn certificate ca
CA certificate.
config vpn certificate ca
Description: CA certificate.
edit <name>
set ca {user}
set range [global|vdom]
set source [factory|user|...]
set ssl-inspection-trusted [enable|disable]
set scep-url {string}
set est-url {string}
set auto-update-days {integer}
set auto-update-days-warning {integer}
set source-ip {ipv4-address}
set ca-identifier {string}
set obsolete [disable|enable]
set fabric-ca [disable|enable]
next
end
config vpn certificate ca
|
Parameter |
Description |
Type |
Size |
Default |
||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
name |
Name. |
string |
Maximum length: 79 |
|
||||||||
|
ca |
CA certificate as a PEM file. |
user |
Not Specified |
|
||||||||
|
range |
Either global or VDOM IP address range for the CA certificate. |
option |
- |
vdom |
||||||||
|
|
|
|||||||||||
|
source |
CA certificate source type. |
option |
- |
user |
||||||||
|
|
|
|||||||||||
|
ssl-inspection-trusted |
Enable/disable this CA as a trusted CA for SSL inspection. |
option |
- |
enable |
||||||||
|
|
|
|||||||||||
|
scep-url |
URL of the SCEP server. |
string |
Maximum length: 255 |
|
||||||||
|
est-url |
URL of the EST server. |
string |
Maximum length: 255 |
|
||||||||
|
auto-update-days |
Number of days to wait before requesting an updated CA certificate. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
||||||||
|
auto-update-days-warning |
Number of days before an expiry-warning message is generated. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
||||||||
|
source-ip |
Source IP address for communications to the SCEP server. |
ipv4-address |
Not Specified |
0.0.0.0 |
||||||||
|
ca-identifier |
CA identifier of the SCEP server. |
string |
Maximum length: 255 |
|
||||||||
|
obsolete |
Enable/disable this CA as obsoleted. |
option |
- |
disable |
||||||||
|
|
|
|||||||||||
|
fabric-ca |
Enable/disable synchronization of CA across Security Fabric. |
option |
- |
disable |
||||||||
|
|
|
|||||||||||