Page tree

/certificate

Certificate management

add

Create a new item
ParameterTypeDescriptionAdditional Notes
common-name
Type: string
Certificates common name

copy-fromarg_node
ID of item to make a copy from

country
Type: string
Certificates country of origin

days-validnum [0 .. 4294967295]
Number of days certificate is valid

key-size
enum [1024 | 1536 | 2048 | 4096 | 8192 | prime256v1 | secp384r1 | secp521r1]
Size of the certificates key

key-usage
Type: ubit_arg
bitspec: {'producer': '', 'sub': [{'key': 'code-sign', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 536870912}, {'key': 'ormask', 'value': 536870912}]}}, {'key': 'content-commitment', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 2}, {'key': 'ormask', 'value': 2}]}}, {'key': 'crl-sign', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 64}, {'key': 'ormask', 'value': 64}]}}, {'key': 'data-encipherment', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 8}, {'key': 'ormask', 'value': 8}]}}, {'key': 'decipher-only', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 256}, {'key': 'ormask', 'value': 256}]}}, {'key': 'digital-signature', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 1}, {'key': 'ormask', 'value': 1}]}}, {'key': 'dvcs', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 2097152}, {'key': 'ormask', 'value': 2097152}]}}, {'key': 'email-protect', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 268435456}, {'key': 'ormask', 'value': 268435456}]}}, {'key': 'encipher-only', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 128}, {'key': 'ormask', 'value': 128}]}}, {'key': 'ipsec-end-system', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 134217728}, {'key': 'ormask', 'value': 134217728}]}}, {'key': 'ipsec-tunnel', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 67108864}, {'key': 'ormask', 'value': 67108864}]}}, {'key': 'ipsec-user', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 33554432}, {'key': 'ormask', 'value': 33554432}]}}, {'key': 'key-agreement', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 16}, {'key': 'ormask', 'value': 16}]}}, {'key': 'key-cert-sign', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 32}, {'key': 'ormask', 'value': 32}]}}, {'key': 'key-encipherment', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 4}, {'key': 'ormask', 'value': 4}]}}, {'key': 'ocsp-sign', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 8388608}, {'key': 'ormask', 'value': 8388608}]}}, {'key': 'server-gated-crypto', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 4194304}, {'key': 'ormask', 'value': 4194304}]}}, {'key': 'timestamp', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 16777216}, {'key': 'ormask', 'value': 16777216}]}}, {'key': 'tls-client', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 1073741824}, {'key': 'ormask', 'value': 1073741824}]}}, {'key': 'tls-server', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 2147483648}, {'key': 'ormask', 'value': 2147483648}]}}]}
Processes allowed to use key (detailed descriptions can be found in RFC 5280)

locality
Type: string


name
Type: string
Reference name

organization
Type: string
Organization certificate is generated for

state
Type: string


subject-alt-name
Type: obj_arg
+arg: {'producer': 'super_arg', 'sub': [{'key': '#sub', 'value': {'producer': '', 'sub': [{'key': 1, 'value': {'producer': '', 'sub': [{'key': '+arg', 'value': {'producer': 'enum_arg', 'sub': [{'key': '#mapping', 'value': {'producer': '', 'sub': [{'key': '', 'value': {'producer': 'const_mapping', 'sub': [{'key': 'data', 'value': {'producer': '', 'sub': [{'key': 'DNS', 'value': 2}, {'key': 'IP', 'value': 1}, {'key': 'email', 'value': 3}]}}]}}]}}, {'key': 'acc', 'value': {'producer': '"u7f"', 'sub': []}}, {'key': 'constant', 'value': True}]}}, {'key': 'chars', 'value': {'producer': '\x06?', 'sub': []}}, {'key': 'name', 'value': 'type'}]}}, {'key': 2, 'value': {'producer': '', 'sub': [{'key': '+arg', 'value': {'producer': 'alt_arg', 'sub': [{'key': '#arg', 'value': {'producer': '', 'sub': [{'key': 'ip', 'value': {'producer': 'alt_arg', 'sub': [{'key': '#arg', 'value': {'producer': '', 'sub': [{'key': 'ip', 'value': {'producer': 'ip_arg', 'sub': [{'key': 'acc', 'value': {'producer': '"be u7d"', 'sub': []}}]}}, {'key': 'ipv6', 'value': {'producer': 'ip6_arg', 'sub': [{'key': 'acc', 'value': {'producer': '"a7e"', 'sub': []}}, {'key': 'sysc', 'value': 0}]}}]}}]}}, {'key': 'string', 'value': {'producer': 'string_arg', 'sub': [{'key': 'acc', 'value': {'producer': '"s7c"', 'sub': []}}]}}]}}]}}, {'key': 'name', 'value': 'value'}, {'key': 'prefix', 'value': ':'}]}}]}}]}


trustedbool
Whether or not to include certificate in "trusted certificate chain"

unit
Type: string


add-scep

Add SCEP client
ParameterTypeDescriptionAdditional Notes
as-value
Type: switch
interesting: False
value: True
Prints out output as value (used in scripting)

ca-identity
Type: string
SCEP CA identity

challenge-password
Type: string
sensitive: True
SCEP servers challange password

name
Type: string
Display name of SCEP client

on-smart-cardbool
stores private key on smart card if hardware supports it

refreshbool
check certificate expiry and refresh it if expired

scep-url
Type: string
URL to the server, must contain both CGI-PATH and CGI-PROG if used on the server

template
Template to use from template list

card-reinstall

ParameterTypeDescriptionAdditional Notes
as-value
Type: switch
interesting: False
value: True
Prints out output as value (used in scripting)

pin
Type: string
maxLen: 20
sensitive: True


card-verify

ParameterTypeDescriptionAdditional Notes
as-value
Type: switch
interesting: False
value: True
Prints out output as value (used in scripting)

pin
Type: string
maxLen: 20
sensitive: True


create-certificate-request

Create a new certificate request
ParameterTypeDescriptionAdditional Notes
as-value
Type: switch
interesting: False
value: True
Prints out output as value (used in scripting)

challenge-passphrase
Type: string
sensitive: True


key-passphrase
Type: string
sensitive: True


key-sizenum [1024 .. 8192]

template


unstructured-address
Type: string


edit

Edit items
ParameterTypeDescriptionAdditional Notes
numberarg_node
Item number

value-name
enum [common-name | country | days-valid | key-size | key-usage | locality | name | organization | state | subject-alt-name | trusted | unit]
Name of editable property
Enum parameters:
  • common-name - Certificates common name

export

Print or save an export script that can be used to restore configuration
ParameterTypeDescriptionAdditional Notes
compact
Type: switch
value: True
Only exports user-changed settings without defaults

file
Type: string
File name
Name of the file that will be stored in FTP access area.

hide-sensitive
Type: switch
value: True
Hides sensitive information like passwords from beeing printed

terse
Type: switch
value: True
Creates export with output without line wraps

verbose
Type: switch
value: True
Creates output with all RouterOS settings (including the default ones)

export-certificate

Certificate export tool
ParameterTypeDescriptionAdditional Notes
export-passphrase
Type: string
sensitive: True
Passphrase to be assigned to certificate

numbersarg_node
List of item numbers

typebool
Certificate type

find

Find items by value
ParameterTypeDescriptionAdditional Notes
where
Type: query_arg
query: True
Generates output depending on values supplied (used mainly for scripting)

get

Gets value of item's property
ParameterTypeDescriptionAdditional Notes
numberarg_node
Item number

value-name
enum [authority | ca | ca-crl-host | ca-fingerprint | challenge-password | common-name | country | crl | days-valid | digest-algorithm | expired | expires-after | fingerprint | invalid-after | invalid-before | issued | issuer | key-size | key-type | key-usage | locality | name | organization | private-key | req-fingerprint | revoked | scep-url | serial-number | smart-card-key | state | status | subject-alt-name | trusted | unit]
Name of the value you want to get

import

Import existing certificate
ParameterTypeDescriptionAdditional Notes
as-value
Type: switch
interesting: False
value: True
Prints out output as value (used in scripting)

file-name
Name of the certificate file

passphrase
Type: string
sensitive: True
Certificates passphrase

issued-revoke

ParameterTypeDescriptionAdditional Notes
numbersarg_node
List of item numbers

print

Print values of item properties
ParameterTypeDescriptionAdditional Notes
append
Type: switch
value: True
Controls if print to file overwrites or appends to content of an existing file

as-value
Type: switch
interesting: False
value: True
Prints out output as value (used in scripting)

brief
Type: switch
value: True
Displays brief description

count-only
Type: switch
value: True
Shows only the count of special login users

default-config
Type: switch
sysc: 3
value: True


detail
Type: switch
value: True
Displays detailed information

file
Type: string
Print the content of the submenu into specific file

follow
Type: switch
value: True
Updates output in real-time

follow-only
Type: switch
value: True
Will output changes that have occured after invoking command

follow-strict
Type: switch
value: True


fromarg_node
Print parameters only from specified item

intervaltime [200000000 .. 9223372036854775807] unit: 1000000
Displays information and refreshes it in selected time interval

proplist
Type: obj_arg
+arg: {'producer': 'enum_arg', 'sub': [{'key': '#mapping', 'value': {'producer': '', 'sub': [{'key': '', 'value': {'producer': 'const_mapping', 'sub': [{'key': 'data', 'value': {'producer': '', 'sub': [{'key': 'authority', 'value': 39}, {'key': 'ca', 'value': 16}, {'key': 'ca-crl-host', 'value': 15}, {'key': 'ca-fingerprint', 'value': 21}, {'key': 'challenge-password', 'value': 25}, {'key': 'common-name', 'value': 9}, {'key': 'country', 'value': 4}, {'key': 'crl', 'value': 37}, {'key': 'days-valid', 'value': 12}, {'key': 'digest-algorithm', 'value': 2}, {'key': 'expired', 'value': 42}, {'key': 'expires-after', 'value': 24}, {'key': 'fingerprint', 'value': 19}, {'key': 'invalid-after', 'value': 23}, {'key': 'invalid-before', 'value': 22}, {'key': 'issued', 'value': 40}, {'key': 'issuer', 'value': 1}, {'key': 'key-size', 'value': 10}, {'key': 'key-type', 'value': 3}, {'key': 'key-usage', 'value': 14}, {'key': 'locality', 'value': 6}, {'key': 'name', 'value': 0}, {'key': 'organization', 'value': 7}, {'key': 'private-key', 'value': 36}, {'key': 'req-fingerprint', 'value': 20}, {'key': 'revoked', 'value': 26}, {'key': 'scep-url', 'value': 17}, {'key': 'serial-number', 'value': 18}, {'key': 'smart-card-key', 'value': 38}, {'key': 'state', 'value': 5}, {'key': 'status', 'value': 27}, {'key': 'subject-alt-name', 'value': 11}, {'key': 'trusted', 'value': 43}, {'key': 'unit', 'value': 8}]}}, {'key': 'help', 'value': {'producer': '', 'sub': [{'key': 0, 'value': 'Reference name'}, {'key': 1, 'value': 'Issuer of the certificate'}, {'key': 4, 'value': 'Certificates country of origin'}, {'key': 7, 'value': 'Organization certificate is generated for'}, {'key': 9, 'value': 'Certificates common name'}, {'key': 10, 'value': 'Size of the certificates key'}, {'key': 12, 'value': 'Number of days certificate is valid'}, {'key': 13, 'value': 'Whether or not to include certificate in "trusted certificate chain"'}, {'key': 14, 'value': 'Processes allowed to use key (detailed descriptions can be found in RFC 5280)'}, {'key': 16, 'value': 'Whether the key is used for building or verifying certificate chains'}, {'key': 18, 'value': 'Serial number of the certificate'}, {'key': 22, 'value': 'Date the certificate is valid from'}, {'key': 23, 'value': 'Date the certificate is valid until'}, {'key': 36, 'value': 'The private key of the certificate'}]}}]}}]}}, {'key': 'acc', 'value': {'producer': '"ufd0007"', 'sub': []}}, {'key': 'hint', 'value': 'Name of the value you want to get'}, {'key': 'setUnsetAcc', 'value': {'producer': '"bfd0008"', 'sub': []}}]}
Names of properties

show-ids
Type: switch
value: True
Prints static IDs for selected submenu (Requires: Option.npk)

terse
Type: switch
interesting: False
value: True
Show details in compact and machine friendly format

value-list
Type: switch
interesting: False
value: True
Show properties one per line

where
Type: query_arg
query: True
Generates output depending on values supplied (used mainly for scripting)

without-paging
Type: switch
value: True
Displays information in one piece

remove

Remove item
ParameterTypeDescriptionAdditional Notes
numbersarg_node
List of item numbers

scep-renew

ParameterTypeDescriptionAdditional Notes
numbersarg_node
List of item numbers

set

ParameterTypeDescriptionAdditional Notes
common-name
Type: string
Certificates common name

country
Type: string
Certificates country of origin

days-validnum [0 .. 4294967295]
Number of days certificate is valid

key-size
enum [1024 | 1536 | 2048 | 4096 | 8192 | prime256v1 | secp384r1 | secp521r1]
Size of the certificates key

key-usage
Type: ubit_arg
bitspec: {'producer': '', 'sub': [{'key': 'code-sign', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 536870912}, {'key': 'ormask', 'value': 536870912}]}}, {'key': 'content-commitment', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 2}, {'key': 'ormask', 'value': 2}]}}, {'key': 'crl-sign', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 64}, {'key': 'ormask', 'value': 64}]}}, {'key': 'data-encipherment', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 8}, {'key': 'ormask', 'value': 8}]}}, {'key': 'decipher-only', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 256}, {'key': 'ormask', 'value': 256}]}}, {'key': 'digital-signature', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 1}, {'key': 'ormask', 'value': 1}]}}, {'key': 'dvcs', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 2097152}, {'key': 'ormask', 'value': 2097152}]}}, {'key': 'email-protect', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 268435456}, {'key': 'ormask', 'value': 268435456}]}}, {'key': 'encipher-only', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 128}, {'key': 'ormask', 'value': 128}]}}, {'key': 'ipsec-end-system', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 134217728}, {'key': 'ormask', 'value': 134217728}]}}, {'key': 'ipsec-tunnel', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 67108864}, {'key': 'ormask', 'value': 67108864}]}}, {'key': 'ipsec-user', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 33554432}, {'key': 'ormask', 'value': 33554432}]}}, {'key': 'key-agreement', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 16}, {'key': 'ormask', 'value': 16}]}}, {'key': 'key-cert-sign', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 32}, {'key': 'ormask', 'value': 32}]}}, {'key': 'key-encipherment', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 4}, {'key': 'ormask', 'value': 4}]}}, {'key': 'ocsp-sign', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 8388608}, {'key': 'ormask', 'value': 8388608}]}}, {'key': 'server-gated-crypto', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 4194304}, {'key': 'ormask', 'value': 4194304}]}}, {'key': 'timestamp', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 16777216}, {'key': 'ormask', 'value': 16777216}]}}, {'key': 'tls-client', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 1073741824}, {'key': 'ormask', 'value': 1073741824}]}}, {'key': 'tls-server', 'value': {'producer': '', 'sub': [{'key': 'andmask', 'value': 2147483648}, {'key': 'ormask', 'value': 2147483648}]}}]}
Processes allowed to use key (detailed descriptions can be found in RFC 5280)

locality
Type: string


name
Type: string
Reference name

numbersarg_node
List of item numbers

organization
Type: string
Organization certificate is generated for

state
Type: string


subject-alt-name
Type: obj_arg
+arg: {'producer': 'super_arg', 'sub': [{'key': '#sub', 'value': {'producer': '', 'sub': [{'key': 1, 'value': {'producer': '', 'sub': [{'key': '+arg', 'value': {'producer': 'enum_arg', 'sub': [{'key': '#mapping', 'value': {'producer': '', 'sub': [{'key': '', 'value': {'producer': 'const_mapping', 'sub': [{'key': 'data', 'value': {'producer': '', 'sub': [{'key': 'DNS', 'value': 2}, {'key': 'IP', 'value': 1}, {'key': 'email', 'value': 3}]}}]}}]}}, {'key': 'acc', 'value': {'producer': '"u7f"', 'sub': []}}, {'key': 'constant', 'value': True}]}}, {'key': 'chars', 'value': {'producer': '\x06?', 'sub': []}}, {'key': 'name', 'value': 'type'}]}}, {'key': 2, 'value': {'producer': '', 'sub': [{'key': '+arg', 'value': {'producer': 'alt_arg', 'sub': [{'key': '#arg', 'value': {'producer': '', 'sub': [{'key': 'ip', 'value': {'producer': 'alt_arg', 'sub': [{'key': '#arg', 'value': {'producer': '', 'sub': [{'key': 'ip', 'value': {'producer': 'ip_arg', 'sub': [{'key': 'acc', 'value': {'producer': '"be u7d"', 'sub': []}}]}}, {'key': 'ipv6', 'value': {'producer': 'ip6_arg', 'sub': [{'key': 'acc', 'value': {'producer': '"a7e"', 'sub': []}}, {'key': 'sysc', 'value': 0}]}}]}}]}}, {'key': 'string', 'value': {'producer': 'string_arg', 'sub': [{'key': 'acc', 'value': {'producer': '"s7c"', 'sub': []}}]}}]}}]}}, {'key': 'name', 'value': 'value'}, {'key': 'prefix', 'value': ':'}]}}]}}]}


trustedbool
Whether or not to include certificate in "trusted certificate chain"

unit
Type: string


sign

ParameterTypeDescriptionAdditional Notes
append
Type: switch
value: True
Controls if print to file overwrites or appends to content of an existing file

as-value
Type: switch
value: True
Prints out output as value (used in scripting)

ca
issuer CA

ca-crl-host
Type: multi_arg
+arg: {'producer': 'string_arg', 'sub': [{'key': 'acc', 'value': {'producer': '"s0"', 'sub': []}}]}
switchIds: {4294967295}
adds CRL URL to issued CA

ca-on-smart-cardbool
stores CA's private key on smart card

doarg_node
Execute given script after each time it prints stats on the screen

durationtime [-9223372036854775808 .. 9223372036854775807] unit: 1000000

file
Type: string
interesting: False
File name where to print output

intervaltime [20000000 .. 5000000000] unit: 1000000
Delay between messages in seconds

name
Type: string


numberarg_node
Item number

once
Type: switch
value: True
Execute and print commands output just once

without-paging
Type: switch
value: True
Prints out each update as new output instead of overwriting previous one on each update

sign-certificate-request

ParameterTypeDescriptionAdditional Notes
as-value
Type: switch
interesting: False
value: True
Prints out output as value (used in scripting)

ca


days-validnum [0 .. 4294967295]

file-name


/certificate/crl

add

ParameterTypeDescriptionAdditional Notes
copy-fromarg_node
ID of item to make a copy from

fingerprint
Type: string


url
Type: string


download

export

Print or save an export script that can be used to restore configuration
ParameterTypeDescriptionAdditional Notes
compact
Type: switch
value: True
Only exports user-changed settings without defaults

file
Type: string
File name
Name of the file that will be stored in FTP access area.

hide-sensitive
Type: switch
value: True
Hides sensitive information like passwords from beeing printed

terse
Type: switch
value: True
Creates export with output without line wraps

verbose
Type: switch
value: True
Creates output with all RouterOS settings (including the default ones)

find

Find items by value
ParameterTypeDescriptionAdditional Notes
where
Type: query_arg
query: True
Generates output depending on values supplied (used mainly for scripting)

flush

get

Gets value of item's property
ParameterTypeDescriptionAdditional Notes
numberarg_node
Item number

value-name
enum [cert | dynamic | expired | fingerprint | invalid | last-update | next-update | num | revoked | signature | url]
Name of the value you want to get

print

Print values of item properties
ParameterTypeDescriptionAdditional Notes
append
Type: switch
value: True
Controls if print to file overwrites or appends to content of an existing file

as-value
Type: switch
interesting: False
value: True
Prints out output as value (used in scripting)

brief
Type: switch
value: True
Displays brief description

count-only
Type: switch
value: True
Shows only the count of special login users

default-config
Type: switch
sysc: 3
value: True


detail
Type: switch
value: True
Displays detailed information

file
Type: string
Print the content of the submenu into specific file

follow
Type: switch
value: True
Updates output in real-time

follow-only
Type: switch
value: True
Will output changes that have occured after invoking command

follow-strict
Type: switch
value: True


fromarg_node
Print parameters only from specified item

intervaltime [200000000 .. 9223372036854775807] unit: 1000000
Displays information and refreshes it in selected time interval

proplist
Type: obj_arg
+arg: {'producer': 'enum_arg', 'sub': [{'key': '#mapping', 'value': {'producer': '', 'sub': [{'key': '', 'value': {'producer': 'const_mapping', 'sub': [{'key': 'data', 'value': {'producer': '', 'sub': [{'key': 'cert', 'value': 0}, {'key': 'dynamic', 'value': 17}, {'key': 'expired', 'value': 16}, {'key': 'fingerprint', 'value': 6}, {'key': 'invalid', 'value': 18}, {'key': 'last-update', 'value': 5}, {'key': 'next-update', 'value': 4}, {'key': 'num', 'value': 2}, {'key': 'revoked', 'value': 3}, {'key': 'signature', 'value': 7}, {'key': 'url', 'value': 1}]}}]}}]}}, {'key': 'acc', 'value': {'producer': '"ufd0007"', 'sub': []}}, {'key': 'hint', 'value': 'Name of the value you want to get'}, {'key': 'setUnsetAcc', 'value': {'producer': '"bfd0008"', 'sub': []}}]}
Names of properties

show-ids
Type: switch
value: True
Prints static IDs for selected submenu (Requires: Option.npk)

terse
Type: switch
interesting: False
value: True
Show details in compact and machine friendly format

value-list
Type: switch
interesting: False
value: True
Show properties one per line

where
Type: query_arg
query: True
Generates output depending on values supplied (used mainly for scripting)

without-paging
Type: switch
value: True
Displays information in one piece

remove

Remove item
ParameterTypeDescriptionAdditional Notes
numbersarg_node
List of item numbers

set

ParameterTypeDescriptionAdditional Notes
fingerprint
Type: string


numbersarg_node
List of item numbers

url
Type: string


/certificate/scep-server

add

ParameterTypeDescriptionAdditional Notes
ca-cert


copy-fromarg_node
ID of item to make a copy from

days-validnum [0 .. 4294967295]

disabledbool
Defines whether item is ignored or used

next-ca-cert


path
Type: string


request-lifetimetime [300000000000 .. 9223372036854775807] unit: 1000000000

disable

Disable items
ParameterTypeDescriptionAdditional Notes
numbersarg_node
List of item numbers

edit

Edit items
ParameterTypeDescriptionAdditional Notes
numberarg_node
Item number

value-name
enum [ca-cert | days-valid | next-ca-cert | path | request-lifetime]
Name of editable property

enable

Enable items
ParameterTypeDescriptionAdditional Notes
numbersarg_node
List of item numbers

export

Print or save an export script that can be used to restore configuration
ParameterTypeDescriptionAdditional Notes
compact
Type: switch
value: True
Only exports user-changed settings without defaults

file
Type: string
File name
Name of the file that will be stored in FTP access area.

hide-sensitive
Type: switch
value: True
Hides sensitive information like passwords from beeing printed

terse
Type: switch
value: True
Creates export with output without line wraps

verbose
Type: switch
value: True
Creates output with all RouterOS settings (including the default ones)

find

Find items by value
ParameterTypeDescriptionAdditional Notes
where
Type: query_arg
query: True
Generates output depending on values supplied (used mainly for scripting)

get

Gets value of item's property
ParameterTypeDescriptionAdditional Notes
numberarg_node
Item number

value-name
enum [ca-cert | days-valid | disabled | next-ca-cert | path | request-lifetime]
Name of the value you want to get

print

Print values of item properties
ParameterTypeDescriptionAdditional Notes
append
Type: switch
value: True
Controls if print to file overwrites or appends to content of an existing file

as-value
Type: switch
interesting: False
value: True
Prints out output as value (used in scripting)

brief
Type: switch
value: True
Displays brief description

count-only
Type: switch
value: True
Shows only the count of special login users

default-config
Type: switch
sysc: 3
value: True


detail
Type: switch
value: True
Displays detailed information

file
Type: string
Print the content of the submenu into specific file

follow
Type: switch
value: True
Updates output in real-time

follow-only
Type: switch
value: True
Will output changes that have occured after invoking command

follow-strict
Type: switch
value: True


fromarg_node
Print parameters only from specified item

intervaltime [200000000 .. 9223372036854775807] unit: 1000000
Displays information and refreshes it in selected time interval

proplist
Type: obj_arg
+arg: {'producer': 'enum_arg', 'sub': [{'key': '#mapping', 'value': {'producer': '', 'sub': [{'key': '', 'value': {'producer': 'const_mapping', 'sub': [{'key': 'data', 'value': {'producer': '', 'sub': [{'key': 'ca-cert', 'value': 0}, {'key': 'days-valid', 'value': 3}, {'key': 'disabled', 'value': 13}, {'key': 'next-ca-cert', 'value': 1}, {'key': 'path', 'value': 2}, {'key': 'request-lifetime', 'value': 4}]}}, {'key': 'help', 'value': {'producer': '', 'sub': [{'key': 13, 'value': 'Defines whether item is ignored or used'}]}}]}}]}}, {'key': 'acc', 'value': {'producer': '"ufd0007"', 'sub': []}}, {'key': 'hint', 'value': 'Name of the value you want to get'}, {'key': 'setUnsetAcc', 'value': {'producer': '"bfd0008"', 'sub': []}}]}
Names of properties

show-ids
Type: switch
value: True
Prints static IDs for selected submenu (Requires: Option.npk)

terse
Type: switch
interesting: False
value: True
Show details in compact and machine friendly format

value-list
Type: switch
interesting: False
value: True
Show properties one per line

where
Type: query_arg
query: True
Generates output depending on values supplied (used mainly for scripting)

without-paging
Type: switch
value: True
Displays information in one piece

remove

Remove item
ParameterTypeDescriptionAdditional Notes
numbersarg_node
List of item numbers

set

ParameterTypeDescriptionAdditional Notes
ca-cert


days-validnum [0 .. 4294967295]

disabledbool
Defines whether item is ignored or used

next-ca-cert


numbersarg_node
List of item numbers

path
Type: string


request-lifetimetime [300000000000 .. 9223372036854775807] unit: 1000000000

/certificate/settings

edit

Edit items
ParameterTypeDescriptionAdditional Notes
value-name
enum [crl-download | crl-store | crl-use]
Name of editable property

export

Print or save an export script that can be used to restore configuration
ParameterTypeDescriptionAdditional Notes
compact
Type: switch
value: True
Only exports user-changed settings without defaults

file
Type: string
File name
Name of the file that will be stored in FTP access area.

hide-sensitive
Type: switch
value: True
Hides sensitive information like passwords from beeing printed

terse
Type: switch
value: True
Creates export with output without line wraps

verbose
Type: switch
value: True
Creates output with all RouterOS settings (including the default ones)

get

Gets value of item's property
ParameterTypeDescriptionAdditional Notes
value-name
enum [crl-download | crl-store | crl-use]
Name of the value you want to get

print

Print values of item properties
ParameterTypeDescriptionAdditional Notes
as-value
Type: switch
value: True
Prints out output as value (used in scripting)

default-config
Type: switch
sysc: 3
value: True


file
Type: string
Print the content of the submenu into specific file

intervaltime [200000000 .. 9223372036854775807] unit: 1000000
Displays information and refreshes it in selected time interval

without-paging
Type: switch
value: True
Displays information in one piece

set

Change item properties
ParameterTypeDescriptionAdditional Notes
crl-downloadbool
auto CRL download and update

crl-store
enum [ram | system]
CRL storage location

crl-usebool
perform CRL checking when validating trust chain

  • No labels