Creating a user profile ················································································································································ 222
Configuration prerequisites ································································································································ 222
Creating a user profile ········································································································································ 223
Configuring a user profile ··········································································································································· 223
Configuration guidelines ···································································································································· 223
Configuration procedure ···································································································································· 223
Enabling a user profile ················································································································································ 224
HABP configuration ················································································································································· 225
HABP overview ····························································································································································· 225
Configuring HABP ························································································································································ 226
Configuring the HABP server ····························································································································· 226
Configuring an HABP client ······························································································································· 226
Displaying and maintaining HABP ····························································································································· 227
HABP configuration example ······································································································································ 227
Public key configuration ········································································································································· 230
Overview ······································································································································································· 230
PKI configuration ····················································································································································· 240
Introduction to PKI ························································································································································ 240
PKI overview ························································································································································ 240
PKI terms ······························································································································································· 240
PKI architecture ···················································································································································· 241
PKI applications ··················································································································································· 242
PKI operation ······················································································································································· 242
PKI configuration task list ············································································································································ 242
Configuring an entity DN ············································································································································ 243
Configuring a PKI domain ··········································································································································· 244
Retrieving a certificate manually ································································································································ 247
Destroying a local RSA key pair ································································································································ 249
Deleting a certificate ···················································································································································· 250
Displaying and maintaining PKI ································································································································· 251
PKI configuration examples ········································································································································· 251
v