Pki Configuration Task List; Configuring An Entity Dn - 3Com MSR 50 Series Configuration Manual

1832 C 97: PKI C
HAPTER
PKI Configuration Task
List
Configuring an Entity
DN
ONFIGURATION
Complete the following tasks to configure PKI:
Task
"Configuring an Entity DN" on page 1832
"Configuring a PKI Domain" on page 1833
"Submitting a PKI Certificate
Request" on page 1835
"Retrieving a Certificate Manually" on page 1837
"Configuring PKI Certificate Validation" on page 1837
"Destroying a Local RSA Key Pair" on page 1838
"Deleting a Certificate" on page 1839
"Configuring an Access Control Policy" on page 1839
A certificate is a binding of a public key and a set of identity information, where
the set of identity information is referred to as a PKI entity distinguished name
(DN), which is associated with an entity. A CA identifies a certificate applicant
uniquely by the entity name space used by the applicant.
An Entity DN is defined by these parameters:
Common name of the entity.
■
Country code of the entity, a standard 2-character code. For example, CN
■
represents China and US represents the United States of America.
Fully qualified domain name (FQDN) of the entity, a unique identifier of an
■
entity on the network. It consists of a host name and a domain name and can
be resolved to an IP address. For example, www.whatever.com is an FQDN,
where www is a host name and whatever.com a domain name.
IP address of the entity.
■
Locality where the entity resides.
■
Organization to which the entity belongs.
■
Unit of the entity in the organization.
■
State where the entity resides.
■
n
The configuration of an entity DN must comply with the CA certificate issue policy.
You need to determine, for example, which entity DN parameters are mandatory
and which are optional. Otherwise, certificate request may be rejected.
Follow these steps to configure an entity DN:
To do...
Enter system view
"Submitting a Certificate
Request in Auto Mode" on
page 1835
"Submitting a Certificate
Request in Manual Mode"
on page 1836
Use the command...
system-view
Remarks
Required
Required
Use either command
Optional
Optional
Optional
Optional
Optional
Remarks
-