Table of Contents
Advertisement
Figure 78: Issuer Certificates
Explanation for
1. A Certificate Request from VSU
2. The PKI uses the Certificate Request to create a Signed Certificate specifically for VSU
The Signed Certificate is then stored on VSU
3. Every target of VSU
Note:
The target uses an Issuer Certificate to authenticate VSU
Note:
The Issuer Certificate must be from the same PKI which created the VSU
Signed Certificate.
Installing an issuer certificate
Use the Policy Manager for installing Issuer Certificates in a specific VSU. The VSU then uses
the Issuer Certificate to authenticate certificates received from other VSUs.
The process is explained in
To install an Issuer Certificate into a VSU (target):
1. Get an Issuer Certificate from a PKI System. Use the same PKI System that created the
Signed Certificate.
2. The PKI System must use the Distinguishing Encoding Rules (DER) format for creating the
Issuer Certificate.
shortened for the example).
1
2
VSU
A
Targets use Issuer Certificates to
authenticate Signed Certificates they
receive. The Issuer Certificate must be from
the same PKI System that created the Signed
Certificate. Issuer Certificates are stored
on targets.
Figure
78:
A
must have VSU
A
Figure
78.
Figure 79
shows what a certificate looks like (its body has been
PKI
4
3
WAN
Target of VSUA
is sent to a PKI System to be signed.
.
A
's Signed Certificate.
A
Policy Manager - My Certificates
VSU
B
's Signed Certificate.
A
Issue 4 May 2005
.
A
's
A
239
Advertisement
Table of Contents
