Usage - H3C MSR Series Command Reference Manual

If you configure this command multiple times, the most recent configuration takes effect.
Examples
# Configure the DN for PKI entity en.
<Sysname> system-view
[Sysname] pki entity en
[Sysname-pki-entity-en] subject-dn
CN=test,C=CN,O=abc,OU=rdtest,OU=rstest,ST=countryA,L=pukras
Related commands
common-name
country
locality
organization
organization-unit
state

usage

Use usage to specify the extensions for certificates.
Use undo usage to remove certificate extensions.
Syntax
usage { ike | ssl-client | ssl-server } *
undo usage [ ike | ssl-client | ssl-server ] *
Default
No certificate extensions are specified. A certificate can be used for IKE, SSL clients, and SSL
servers.
Views
PKI domain view
Predefined user roles
network-admin
Parameters
ike: Specifies the IKE certificate extension so IKE peers can use the certificates.
ssl-client: Specifies the SSL client certificate extension so the SSL client can use the certificates.
ssl-server: Specifies the SSL server certificate extension so the SSL server can use the certificates.
Usage guidelines
If you do not specify any keywords for the undo usage command, this command removes all
certificate extensions.
The extension options contained in a certificate depends on the CA policy, and might be different
from those specified in the PKI domain.
Examples
# Specify the IKE certificate extension.
<Sysname> system-view
[Sysname] pki domain aaa
507