Requesting a certificate
To request a certificate, a PKI entity must provide its identity information and public key to a CA.
A certificate request can be submitted to a CA in offline or online mode.
Offline mode—A certificate request is submitted by using an out-of-band method, such as phone, disk, or email. You can use this mode as required or if you fail to request a certificate in online mode.
To submit a certificate request in offline mode:
Use pki request-certificate domain pkcs10 to print the request information on the terminal or use pki request-certificate domain pkcs10 filename to save the request information to a local file.
Send the printed information or the saved file to the CA by using an out-of-band method.
Online mode—A certificate request can be automatically or manually submitted. This section describes the online request mode.