Pki Storage - HP FlexNetwork MSR Series Command Reference Manual
Comware 7 security
Hide thumbs
Also See for FlexNetwork MSR Series:
- Configuration manual (392 pages) ,
- Configuration manuals (159 pages)
Advertisement
•
If the PKI domain is not configured with the CRL repository, the device looks up the local
certificates and then the CA certificate for the CRL repository. If a CRL repository is found, the
device obtains CRLs from the CRL repository. If no CRL repository is found, the device obtains
CRLs through the SCEP protocol.
Examples
# Obtain CRLs from the CRL repository.
<Sysname> system-view
[Sysname] pki retrieve-crl domain aaa
Related commands
crl url
ldap server
pki storage
Use pki storage to specify the storage path for the certificates or CRLs.
Use undo pki storage to restore the default.
Syntax
pki storage { certificates | crls } dir-path
undo pki storage { certificates | crls }
Default
Certificates and CRLs are stored in the PKI directory on the storage media of the device. The PKI
directory is automatically created when a certificate is successfully requested, obtained, or imported
for the first time.
Views
System view
Predefined user roles
network-admin
Parameters
certificates: Specifies a storage path for certificates.
crls: Specifies a storage path for CRLs.
dir-path: Specifies a storage path, a case-sensitive string, which cannot start with a slash (/) or
contain two dots plus a slash (../). The dir-path argument specifies an absolute path or a relative
path, and the path must exist.
Usage guidelines
On centralized devices in IRF mode, the specified storage path must be on the master device.
On distributed devices in standalone mode, the specified storage path must be on the active MPU.
On distributed devices in IRF mode, the specified storage path must be on the global active MPU.
If the path to be specified does not exist, use the mkdir command to create the path first.
Certificate files use the .cer or .p12 file extension. CRL files use the .crl file extension. After you
change the storage path for certificates or CRLs, the certificate files and CRL files in the original path
are moved to the new path.
Examples
# Specifies flash:/pki-new as the storage path for certificates.
443
Advertisement
