How to export CSR (Certificate Signing Request) via CLI
16240
Created On 01/15/22 14:42 PM - Last Modified 10/06/22 22:59 PM
Objective
This article details the steps/commands required to export the CSR using the CLI.
Environment
- Firewall and Panorama
Procedure
- Generate a CSR on the Palo Alto Firewall (How to Generate CSR)
- Export CSR using the scp export CLI command
> scp export certificate certificate-name Test1212 format pkcs10 include-key no to admin@10.10.10.10:/
Additional Information
- CLI will give multiple format options to export the CSR but use only pkcs10 format.
- GUI doesn't give any option for format and if you run phpdebug it exports using pkcs10 format.
- Specify a file name in the destination path of the export command otherwise exported Certificate will have an unexpected name.