Fortinet white logo
Fortinet white logo

CLI Reference

system certificate ocsp-signing-certs-group

system certificate ocsp-signing-certs-group

Use this command to create the OCSP signing certificate group.

To use this command, your administrator account’s access control profile must have either w or rw permission to the admingrp area. For details, see Permissions.

The OCSP signing certificate group is referenced in system certificate ocsp-responder.

Syntax

config system certificate ocsp-signing-certs-group

edit "<ocsp-group_name>"

config members

edit <ocsp_index>

set name "<ocsp_name>"

next

end

next

end

Variable Description Default

"<ocsp-group_name>"

Enter the name of an OCSP signing certificate group. The maximum length is 63 characters. No default.

<ocsp_index>

Enter the index number of an OCSP signing certificate within the group. The valid range is 1–999,999,999,999,999,999. No default.

name "<ocsp_name>"

Enter the name of a previously uploaded OCSP signing certificate. It's uploaded through the OCSP Signing Certificate tab in Server Objects > Certificates > OCSP. No default.

Related topics

system certificate ocsp-signing-certs-group

system certificate ocsp-signing-certs-group

Use this command to create the OCSP signing certificate group.

To use this command, your administrator account’s access control profile must have either w or rw permission to the admingrp area. For details, see Permissions.

The OCSP signing certificate group is referenced in system certificate ocsp-responder.

Syntax

config system certificate ocsp-signing-certs-group

edit "<ocsp-group_name>"

config members

edit <ocsp_index>

set name "<ocsp_name>"

next

end

next

end

Variable Description Default

"<ocsp-group_name>"

Enter the name of an OCSP signing certificate group. The maximum length is 63 characters. No default.

<ocsp_index>

Enter the index number of an OCSP signing certificate within the group. The valid range is 1–999,999,999,999,999,999. No default.

name "<ocsp_name>"

Enter the name of a previously uploaded OCSP signing certificate. It's uploaded through the OCSP Signing Certificate tab in Server Objects > Certificates > OCSP. No default.

Related topics