Configuring Polling Interval And Count; Configuring Certificate Request Mode - 3Com 3C13636 Configuration Manual

3Com Router 3000 Ethernet Family
Configuration Guide
Caution:
If a local certificate already exists, you are not recommended to create another key
pair. To ensure consistency between key pair and existing certificate, you should
first delete the existing certificate and then create a new key pair.
If a local RSA key pair exists, the newly-generated key pair will overwrite the
existing one.
The key pairs are originally for the use in SSH. Local server regularly updates local
server key pair. However, the host key pair we use in certificate request remains
unchanged.

9.2.7 Configuring Polling Interval and Count

If CA examines certificate request in manual mode, then a long time may be required
before the certificate is issued. In this period, you need to query the request status
periodically, so that you may get the certificate right after it is issued.
Perform the following configuration in PKI domain view.
Table 9-18 Configure polling interval and count
Configure polling interval
and count
Restore the default values
By default, the request polling message is sent for 50 times at an interval of 20 minutes.

9.2.8 Configuring Certificate Request Mode

Request mode can be manual or auto. Auto mode enables the automatic request for a
certificate through SCEP when there is none and for a new one when the old one is
about to expire. For manual mode, all the related configuration and operation need to
be carried out manually.
Perform the following configuration in PKI domain view.
Table 9-19 Configure certificate request mode
Configure certificate request mode
Operation
certificate request polling { interval minutes |
count count }
undo certificate request polling { interval | count }
Operation
3Com Corporation
Command
certificate request mode { manual | auto
[ key-length key-length | password { simple
| cipher } password ]* }
9-12
Chapter 9 PKI Configuration
Command