Configuring A Pki Domain - HP FlexFabric 5930 Series Security Configuration Manual

Step
3. Set a common name for the
entity.
4. Set the country code of the
entity.
5. Set the locality of the entity.
6. Set the organization of the
entity.
7. Set the unit of the entity in
the organization.
8. Set the state where the entity
resides.
9. Set the FQDN of the entity.
10. Configure the IP address of
the entity.

Configuring a PKI domain

A PKI domain contains enrollment information for a PKI entity. It is locally significant and is intended only
for reference by other applications like SSL.
The fingerprint of a CA root certificate is the hash value of the root certificate content. Each CA root
certificate has a unique hash value. You can specify the fingerprint used for verifying the root certificate
in the PKI domain.
After receiving a CA root certificate that does not exist locally, the PKI entity verifies the fingerprint of the
root certificate in the following cases:
• For an obtained or imported CA root certificate, if its fingerprint does not match the one configured
for the PKI domain, the device rejects the root certificate, and the obtain or import operation fails.
If you do not specify the fingerprint for the PKI domain, the system asks you to verify the fingerprint
manually.
For a CA root certificate obtained through an automatic local certificate request process triggered
•
by an application, if its fingerprint does not match the one configured for the PKI domain, the device
rejects the root certificate, and the local certificate request fails. If you do not specify the fingerprint
for the PKI domain, the local certificate request fails.
To configure a PKI domain:
Step
1. Enter system view.
2. Create a PKI domain
and enter its view.
Command
common-name
common-name-sting
country country-code-string
locality locality-name
organization org-name
organization-unit org-unit-name
state state-name
fqdn fqdn-name-string
ip { ip-address | interface
interface-type
interface-number }
Command
system-view
pki domain domain-name
73
Remarks
By default, the common name is not set.
By default, the country code is not set.
By default, the locality is not set.
By default, the organization is not set.
By default, the unit is not set.
By default, the state is not set.
By default, the FQDN is not set.
By default, the IP address is not
configured.
Remarks
N/A
By default, no PKI domains exist.