M9000国密ipsec证书申请文件

现场M9000想要配置国密ipsec，需要设备生成证书申请文件发给证书机构来申请证书，如何操作？

参考以下配置流程，将最后黄色命令输出发给证书机构即可

RBM_S[M9010_2]pki entity zhang3  
RBM_S[M9010_2-pki-entity-zhang3]common-name z3 
RBM_S[M9010_2-pki-entity-zhang3]pki domain zhang3   
RBM_S[M9010_2-pki-domain-zhang3]certificate request from ca
RBM_S[M9010_2-pki-domain-zhang3]certificate request entity zhang3  
RBM_S[M9010_2-pki-domain-zhang3]public-key sm2 encryption name sm2enc signature name sm2sig    
RBM_S[M9010_2-pki-domain-zhang3]undo crl check enable
RBM_S[M9010_2-pki-domain-zhang3]quit

RBM_S[M9010_2]public-key local create sm2 name sm2enc 
Generating Keys...
..
Created the key pair successfully.
RBM_S[M9010_2]public-key local create sm2 name  sm2sig 
Generating Keys...
.
Created the key pair successfully.
RBM_S[M9010_2]dis public-key local sm2 public ?
  >     Redirect it to a file
  >>    Redirect it to a file in append mode
  name  Specify a local key pair by its name
  |     Matching output
  <cr>  

RBM_S[M9010_2]dis public-key local sm2 public 

=============================================
Key name: sm2sig
Key type: SM2
Key length: 256
Time when key pair created: 15:37:31 2024/04/16
Key code:

   3059301306072A8648CE3D020106082A811CCF5501822D03420004F38BD14EDD6B50C9ACE4
   E889038C029D038A2478DACA92F545BC2A89AAC8E38E74A7E8504EEF5C856B2FDAD8914425
   460FCD0CA5F95814CF6BC57FDF0ED66A23

=============================================
Key name: sm2enc
Key type: SM2
Key length: 256
Time when key pair created: 15:37:20 2024/04/16
Key code:

   3059301306072A8648CE3D020106082A811CCF5501822D0342000447280978343EE7DF6EDE
   606C9E6C755AC782F642CA8536CFD1DEFA6258251A3D0B6B824195AAD10E279E1DFEFD46BA
   7A37284FF9897F4A900756A03868ED6BD6

=============================================

RBM_S[M9010_2] pki request-certificate domain zhang3 pkcs10

.

*** Request for signature certificate ***

-----BEGIN CERTIFICATE REQUEST-----

MIHoMIGOAgEAMA4xDDAKBgNVBAMTA3ozIDBZMBMGByqGSM49AgEGCCqBHM9VAYIt

A0IABPOL0U7da1DJrOToiQOMAp0DiiR42sqS9UW8KomqyOOOdKfoUE7vXIVrL9rY

kUQlRg/NDKX5WBTPa8V/3w7WaiOgHjAcBgkqhkiG9w0BCQ4xDzANMAsGA1UdDwQE

AwIGwDAMBggqgRzPVQGDdQUAA0cAMEQCIE5tZbccIhzAXzffC/sTxoxYe9h0xjLg

vKbEcpK13XLcAiBhs8c8WUJcvXTQ+/dssGkXP+iJnE44xy8f0R2dPYCfCw==

-----END CERTIFICATE REQUEST-----

.

*** Request for encryption certificate ***

-----BEGIN CERTIFICATE REQUEST-----

MIHoMIGOAgEAMA4xDDAKBgNVBAMTA3ozIDBZMBMGByqGSM49AgEGCCqBHM9VAYIt

A0IABEcoCXg0Puffbt5gbJ5sdVrHgvZCyoU2z9He+mJYJRo9C2uCQZWq0Q4nnh3+

/Ua6ejcoT/mJf0qQB1agOGjta9agHjAcBgkqhkiG9w0BCQ4xDzANMAsGA1UdDwQE

AwIEMDAMBggqgRzPVQGDdQUAA0cAMEQCIDk+fqbXm4L7vWIH0YSoatuTsJY4XM7K

TdCMjvDHUz/lAiBkpCxtY2YGIvCVUYQedKqlB4p/0Kj88sjQ3xaf2mTFfA==

-----END CERTIFICATE REQUEST-----

设备操作命令后，将pki request-certificate domain xxx pkcs10命令输出结果发给证书机构即可。