Configuring A Pki Entity - Huawei AR1200-S Configuration Manual

Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security
Figure 12-2 PKI configuration roadmap
Configure a PKI domain
certificate authentication
License Support
The PKI function is used with a license. To use the PKI function, apply for and purchase the
following license from the Huawei local office:
l

12.3 Configuring a PKI Entity

A certificate binds a public key to a set of information that uniquely identifies a PKI entity. A
PKI entity identifies a certificate applicant.
12.3.1 Establishing the Configuration Task
Before configuring a PKI entity, familiarize yourself with the applicable environment, complete
the pre-configuration tasks, and obtain the data required for configuration. This will help you
complete the configuration task quickly and accurately.
Applicable Environment
A certificate binds a public key to a set of information that uniquely identifies a PKI entity. A
distinguished name (DN) of an entity is the identity information of the entity. The identity
information provided by an entity uniquely identifies a certificate applicant.
Issue 02 (2012-03-30)
Configure a PKI entity
Configure certificate
enrollment
(Optional) Configure
(Optional) Manage
certificates
AR1200 Value-Added Security Package
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Configure a PKI entity identifier
(Optional) Configure PKI entity
attributes
Create a PKI domain
Configure the trusted CA name and
enrollment URL
(Optional) Configure CA certificate
fingerprint
(Optional) Configure other attributes
in the PKI domain
Configure manual certificate
enrollment, configure automatic
certificate enrollment and update, or
configure a self-signed or local
certificate
Configure the certificate check mode
Check certificate validity
Delete a CA certificate or local
certificate
Import a certificate
Export a certificate
12 PKI Configuration
237