pki storage

Use pki storage to specify the storage path for the certificates or CRLs.

Use undo pki storage to restore the default.

Syntax

pki storage { certificates | crls } dir-path

undo pki storage { certificates | crls }

Default

Certificates and CRLs are stored in the PKI directory on the storage media of the device. The PKI directory is automatically created when a certificate is successfully requested, obtained, or imported for the first time.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

certificates: Specifies a storage path for certificates.

crls: Specifies a storage path for CRLs.

dir-path: Specifies a storage path, a case-sensitive string, which cannot start with a slash (/) or contain two dots plus a slash (../). The dir-path argument specifies an absolute path or a relative path, and the path must exist.

Usage guidelines

(In standalone mode.) The specified storage path must be on the active MPU.

(In IRF mode.) The specified storage path must be on the global active MPU.

If the path to be specified does not exist, use the mkdir command to create the path first.

Certificate files use the .cer or .p12 file extension. CRL files use the .crl file extension. After you change the storage path for certificates or CRLs, the certificate files and CRL files in the original path are moved to the new path.

Examples

# Specifies flash:/pki-new as the storage path for certificates.

<Sysname> system-view
[Sysname] pki storage certificates flash:/pki-new

# Specifies pki-new as the storage path for CRLs.

<Sysname> system-view
[Sysname] pki storage crls pki-new