3Com 3C13636 Configuration Manual page 1181

3Com Router 3000 Ethernet Family
Configuration Guide
Note:
For details about entity-name, refer to "Section 9.2.5 Configuring Entity Name Space".
III. Configuring registration server location
The registration server location (i.e., URL) needs to be specified. Then entities can
present to this server the certificate request using simple certification enrollment
protocol (SCEP, a protocol to communicate with certification authority).
Perform the following configuration in PKI domain view.
Table 9-5 Specify registration server location
Specify the location of a registration server
Delete the location setting
By default, no registration server location is specified.
IV. Configuring LDAP server IP
Storage of entitity certificates and CRL information is essential to a PKI system. Usually,
this is done using a LDAP directory server.
Perform the following configuration in PKI domain view.
Table 9-6 Specify LDAP server IP
Specify the IP address of an LDAP
server
Delete the IP address setting
By default, no IP address or port is specified for LDAP server. Currently it is LDAP
version2.
V. Configuring the fingerprint for authenticating the root certificate
When receiving the identity certificate from the CA, the router needs to use the root
certificate of the CA to verify the authenticity and validity of the identify certificate. When
receiving the root certificate from the CA, the router needs to authenticate the
fingerprint of the CA root certificate, which is a unique hashed value of the content of
the root certificate. If the fingerprint of the CA root certificate is not identical to the one
Operation
Operation
3Com Corporation
9-6
Chapter 9 PKI Configuration
Command
certificate request url string
undo certificate request url
Command
ldap-server ip ip-address
port-num ] [version version-number ]
undo ldap-server
[ port