Handling Certificate Request

Overview

This document describes how to handle certificate requests as a CA agent. See also Adding CA Agent.

Reviewing Certificate Request

To review the certificate request:

$ pki <agent authentication> ca-cert-request-review <request ID> --file <filename>

It will store the certificate request in the specified file and wait for an action. The file should be reviewed manually and may be edited if necessary.

Then enter one of the following actions to complete the review:

• approve

• reject

• cancel

• update

• validate

• assign

• unassign

Alternatively, the approval process can be done in a single step:

$ pki <agent authentication> ca-cert-request-review <request ID> --action <action>

or

$ pki <agent authentication> ca-cert-request-<action> <request ID>

Approving Certificate Request

To approve a certificate request:

$ pki -n caadmin ca-cert-request-approve 6
------------------------------
Approved certificate request 6
------------------------------
  Request ID: 6
  Type: enrollment
  Request Status: complete
  Operation Result: success
  Certificate ID: 0x6

See Also

• PKI CA Certificate Request CLI