Creating A Self-Signed Certificate Or Local Certificate - Huawei AR1200-S Configuration Manual

Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security
By default, no PKI domain is configured on the AR1200-S.
Step 3 Run:
auto-enroll [ percent ] [ regenerate ]
The automatic certificate enrollment and update function is enabled.
After the automatic certificate enrollment and update function is enabled, users do not need to
manually enroll certificates. When an external application requires a CA or local certificate, it
instructs the system to register a CA or local certificate.
----End

12.5.4 Creating a Self-signed Certificate or Local Certificate

A PKI device can generate a self-signed certificate or local certificate and issue the certificate
to a user.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
pki create-certificate [ self-signed ] { filename file-name }
A self-signed certificate or local certificate is created.
----End
12.5.5 Checking the Configuration
After a certificate is obtained from a CA, or a self-signed certificate or local certificate is created,
you can view certificate information.
Procedure
l
l
----End
12.6 Configuring Certificate Authentication
Before a certificate is used, it must be authenticated.
12.6.1 Establishing the Configuration Task
Before configuring certificate authentication, familiarize yourself with the applicable
environment, complete the pre-configuration tasks, and obtain the data required for
configuration. This will help you complete the configuration task quickly and accurately.
Issue 02 (2012-03-30)
Run the display pki certificate { local | ca } pki-realm-name [ verbose ] command to
check certificate information.
Run the display pki certificate enroll-status pki-realm-name command to view the
certificate enrollment status.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
12 PKI Configuration
247