Table of Contents
Advertisement
Table 245: Auto Re-enrollment Configuration Details
Option
Name
Comment
Ca Profile Name
Challenge Password
Re Enroll Trigger Time
Percentage
Re Generate Keypair
Configuring a CA Profile (NSM Procedure)
Copyright © 2010, Juniper Networks, Inc.
Click the Configuration tab. In the configuration tree, select Security > Pki > Auto Re
3.
Enrollment.
Enter a comment in the Auto Re Enrollment workspace that describes the auto
4.
re-enrollment feature.
In the configuration tree, select Security > Pki > Auto Re Enrollment >
5.
Add or modify settings as specified in Table 245 on page 415.
6.
Click one:
7.
OK—Saves the changes.
Cancel—Cancels the modifications.
Apply—Applies the auto re-enrollment parameters.
Function
Specifies the name of the certificate ID.
Specifies a descriptive comment for the certificate
ID.
Specifies the name of the CA profile.
Specifies the password used by the CA for
enrollment and revocation.
Specifies (in percentage) the re-enrollment trigger
time before the expiration.
Generates a new key pair for an auto re-enrollment.
The CA Profile feature allows you to configure the administrator, enrollment and
revocation list.
To configure the CA profile:
In the NSM navigation tree, select Device Manager > Devices.
1.
Click the Device Tree tab, and then double-click the device for which you want to
2.
configure the CA profile.
Click the Configuration tab. In the configuration tree, select Security > Pki > Ca Profile.
3.
Add or modify settings as specified in Table 246 on page 416.
4.
Click one:
5.
OK—Saves the changes.
Chapter 22: Configuring Security
Certificate Id
Your Action
Enter the name of the certificate ID.
Enter a comment.
Select the CA profile name from the list.
Enter the password.
Set the re-enrollment trigger time. Range:
1 - 99.
Select the Re Generate Keypair check box
to enable this feature.
.
415
Advertisement
Table of Contents
