HP 5920 Series Configuration Manual page 201

Step
3. Specify the trusted CA.
4. Specify the PKI entity
name.
5. Specify the type of
certificate request
reception authority.
6. Specify the certificate
request URL.
7. (Optional.) Set the
SCEP polling interval
and maximum number
of polling attempts.
8. Specify the LDAP
server.
Command
ca identifier name
certificate request entity entity-name
certificate request from { ca | ra }
certificate request url url-string
[ vpn-instance vpn-instance-name ]
certificate request polling { count count |
interval minutes }
ldap-server host hostname [ port
port-number ] [ vpn-instance
vpn-instance-name ]
190
Remarks
By default, no trusted CA is
specified.
To obtain a CA certificate, the
trusted CA name must be provided.
The trusted CA name uniquely
identifies the CA to be used if
multiple CAs exist on the same CA
server. The CA server's URL is
specified by using the certificate
request url command.
By default, no entity is specified.
By default, no authority is
specified.
By default, the certificate request
URL is not specified.
Do not configure this command
when you request a certificate in
offline mode.
By default, the device polls the CA
server for the certificate request
status every 20 minutes. The
maximum number of polling
attempts is 50.
This task is required only when the
CRL repository is an LDAP server
and the URL of the CRL repository
does not contain the host name of
the LDAP server.
By default, no LDAP server is
specified.