enrollment-request signature message-digest-method
Function
The enrollment-request signature message-digest-method command sets the message digest method of signature for the enrollment request.
The undo enrollment-request signature message-digest-method command restores the default message digest method.
By default, the message digest method of signature for the enrollment request is sha-256.
Format
enrollment-request signature message-digest-method { md5 | sha1 | sha-256 | sha-384 | sha-512 }
undo enrollment-request signature message-digest-method
Parameters
| Parameter | Description | Value |
|---|---|---|
| md5 | Sets the digest method used for the enrollment request packet of signed certificate to MD5. | - |
| sha1 | Sets the digest method used for the enrollment request packet of signed certificate to SHA1. | - |
| sha-256 | Sets the digest method used for the enrollment request packet of signed certificate to SHA2-256. | - |
| sha-384 | Sets the digest method used for the enrollment request packet of signed certificate to SHA2-384. | - |
| sha-512 | Sets the digest method used for the enrollment request packet of signed certificate to SHA2-512. | - |
Usage Guidelines
In SCEP local certificate application mode, after a CA server receives a certificate enrollment request from a PKI entity, the CA server requests a signature for authentication, and generates a local certificate only after the authentication is successful.
Other algorithms are more secure than MD5 and SHA1 algorithms and so are recommended.
