Use the gen_certreq command to generate a certificate signing request as part of the 802.1x EAP-TLS (proxy mode) authentication configuration. The gen_certreq command is accessible from the ap:<serial>:802_1x context of the CLI.
| cn | Common name that you want to assign to the Wireless AP. | 
| location | Keyword indicating that the next three parameters specify the location where the Wireless AP is operating. | 
| country | The name of the country where the AP is located. You must use the two-letter ISO abbreviation for the country. | 
| state | The name of the state or province where the AP is located | 
| city | The name of the city where the AP is located | 
| organization | Keyword indicating that the next two parameters specify the name of the organization to which the AP belongs. | 
| name, unit | Organization name, Organizational Unit name to which the AP belongs. | 
| email email_addr | The email address of the organization to which the AP belongs | 
| key-size | Specifies that the certificate supports key size. Valid key size values are 1024 or 2048. | 
EWC.extremenetworks.com:ap:0409920201203751 AP:802_1x# gen_certreq shopfloor_aps location CA Ontario Mississauga organization mnj_Ware_House Service email me@email.com key-size 2048