Cisco Firepower 4100 Command Reference

create certreq
To add a new keyring certificate request, use the create certreq command. If a request already exists for the
current keyring, the command will fail.
To edit an existing certificate request, use the enter certreq command.
You also can use the scope form of this command to enter an existing certificate request to assign or change
properties.
To delete an existing certificate request, use the delete form of this command.
create certreq [ip|subject-name]
delete certreq
enter certreq
scope certreq
Syntax Description
(Optional) Enter the ip keyword and the IPv4 address of the domain on which
this device resides. You will be asked to enter and confirm a password for the
request. This parameter applies only to the create certreq form of the
command.
ip ip_address
(Optional) Enter the subject-name keyword and an identifier for this request;
for example, the appliance host name. You will be asked to enter and confirm
a password for the request. This parameter applies only to the create certreq
form of the command.
subject-name name
Command Modes
scope security/scope keyring/
Command History
ModificationRelease
Command added.1.1(1)
Usage Guidelines
When you create a new keyring certificate request, you are automatically entered into certificate request mode
(security/keyring/certreq) with an asterisk indicating the new certificate request is not yet defined and committed.
You also can scope into certificate request mode for an existing keyring.
Use the set command in certificate request mode to specify certificate request parameters.
Before you create or commit a new certificate request, you must set the RSA key modulus (SSL key length)
using set modulus, on page 202.
Note
Example
This example shows how to create a new keyring and its certificate request:
Cisco Firepower 4100/9300 FXOS Command Reference
55
A – R Commands
create certreq

Cisco Firepower 4100 Specifications

General

Brand	Cisco
Model	Firepower 4100
Category	Firewall
Language	English