Generating Admin CSR with PKI NSS

Jump to bottom

Endi S. Dewata edited this page Dec 15, 2020 · 1 revision

Generating CSR

To create a certificate request, prepare a certificate extension configuration (e.g. admin.conf):

authorityKeyIdentifier = keyid:always
keyUsage               = critical, digitalSignature, nonRepudiation, keyEncipherment
extendedKeyUsage       = clientAuth, emailProtection

Then execute the following command:

$ pki nss-cert-request \
    --subject "CN=Administrator" \
    --ext admin.conf \
    --csr admin.csr

Availability: PKI 10.10

See Also

Tip	To find a page in the Wiki, enter the keywords in search field, press Enter, then click Wikis.

Clone this wiki locally