Pki Certificate Access-Control-Policy; Pki Certificate Attribute-Group - H3C MSR 20-20 Command Reference Manual

Parameter
Description
Example

pki certificate access-control-policy

Syntax
View
Parameter
Description
Example

pki certificate attribute-group

Syntax
org-unit-name: Organization unit name, a case-insensitive string of 1 to 31
characters. No comma can be included. This argument is intended to distinguish
different units in an organization.
Use the
organizational-unit
unit to which this entity belongs.
Use the undo organizational-unit
By default, no organization unit name is specified for an entity.
# Configure the name of the organization unit to which an entity belongs as
unit-name.
<Sysname> system-view
[Sysname] pki entity 1
[Sysname-pki-entity-1] organizational-unit unit-name
pki certificate access-control-policy policy-name
undo pki certificate access-control-policy { policy-name | all }
System view
policy-name: Name of the certificate attribute-based access control policy, a
case-insensitive string of 1 to 16 characters. It cannot be "a", "al" or "all".
all: Specifies all certificate attribute-based access control policies.
Use the
pki certificate access-control-policy
attribute-based access control policy and enter its view.
Use the
undo pki certificate access-control-policy
specified or all certificate attribute-based access control policies.
No access control policy exists by default.
# Configure an access control policy named mypolicy and enter its view.
<Sysname> system-view
[Sysname] pki certificate access-control-policy mypolicy
[Sysname-pki-cert-acp-mypolicy]
pki certificate attribute-group group-name
undo pki certificate attribute-group { group-name | all }
command to specify the name of the organization
command to remove the configuration.
command to create a certificate
2057
command to remove a