HP 1910 User Manual page 459

Hide thumbs Also See for 1910:
Table of Contents

Advertisement

Step
1.
Creating a PKI entity
2.
Creating a PKI domain
3.
Generating an RSA key
pair
4.
Retrieving the CA
certificate
Remarks
(Required.)
Create a PKI entity and configure the identity information.
A certificate is the binding of a public key and the identity information of an
entity, where the identity information is identified by an entity distinguished
name (DN). A CA identifies a certificate applicant uniquely by an entity DN.
IMPORTANT:
The DN settings of an entity must be compliant to the CA certificate issue policy
for confirming which entity parameters are mandatory or optional. Otherwise,
the certificate request might be rejected.
(Required.)
Create a PKI domain, setting the certificate request mode to Manual.
Before requesting a PKI certificate, an entity needs to be configured with
some enrollment information, which is referred to as a PKI domain.
A PKI domain is intended only for convenience of reference by other
applications, and has only local significance.
(Required.)
Generate a local RSA key pair.
By default, no local RSA key pair exists.
Generating an RSA key pair is an important step in certificate request. The
key pair includes a public key and a private key. The private key is kept by
the user, and the public key is transferred to the CA along with some other
information.
IMPORTANT:
If a local certificate already exists, you must remove the certificate before
generating a new key pair, so as to keep the consistency between the key pair
and the local certificate.
(Required.)
Certificate retrieval serves the following purposes:
Locally store the certificates associated with the local security domain for
improved query efficiency and reduced query count,
Prepare for certificate verification.
IMPORTANT:
If a local CA certificate already exists, you cannot perform the CA certificate
retrieval operation. This will avoid possible mismatch between certificates and
registration information resulting from relevant changes. To retrieve the CA
certificate, you need to remove the CA certificate and local certificate first.
398

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents