Forum Discussion
ChadU_140502
Altostratus
AltostratusExport a FIPS based CSR (Certificate Signing Request) via iControl
I'm looking for a way to export a CSR via iControl. The key is FIPS based. Is there anyway this can be done through iControl (SOAP or REST)? I know attempting to export the key results in this error:...
On 11.5.4 I was able to get a CSR back by sending a tmsh command to create a key and generate a CSR. Here's what it looked like:
POST HTTP/1.1
{"command":"run","utilCmdArgs":"-c 'tmsh create sys crypto key example gen-csr common-name \"Example Inc.\" country \"US\" lifetime 3650 subject-alternative-name \"DNS: DNS:www.example.com\" security-type fips'"}
The commandResponse in the reply included the CSR text.
ChadU_140502Altostratus
AltostratusOn 11.5.4 I was able to get a CSR back by sending a tmsh command to create a key and generate a CSR. Here's what it looked like:
POST HTTP/1.1
{"command":"run","utilCmdArgs":"-c 'tmsh create sys crypto key example gen-csr common-name \"Example Inc.\" country \"US\" lifetime 3650 subject-alternative-name \"DNS: DNS:www.example.com\" security-type fips'"}
The commandResponse in the reply included the CSR text.