Configuring A Pki Domain - 3Com MSR 50 Series Configuration Manual

Configuring a PKI
Domain
To do...
Create an entity and enter its
view
Configure the common name
for the entity
Configure the country code for
the entity
Configure the FQDN for the
entity
Configure the IP address for
the entity
Configure the locality of the
entity
Configure the organization
name for the entity
Configure the unit name for
the entity
Configure the state or
province for the entity
n
Currently, up to two entities can be created on a device.
■
Windows 2000 CA server has some restrictions on the data length of a
■
certificate request. If the entity DN in a certificate request goes beyond a
certain limit, the server does not respond to the certificate request.
Before requesting a PKI certificate, an entity needs to be configured with some
enrollment information, which is referred to as a PKI domain.
A PKI domain is intended only for convenience of reference by other applications
like IKE and SSL, and has only local significance. A PKI domain configured on a
device is invisible to CAs and other devices. Every PKI domain has its own
parameters.
A PKI domain is defined by these parameters:
Trusted CA
■
An entity requests a certificate from a trusted CA.
Entity
■
A certificate applicant uses an entity to provide its identity information to a CA.
Use the command...
pki entity entity-name
common-name name
country country-code-str Optional
fqdn name-str
ip ip-address
locality locality-name
organization org-name
organization-unit
org-unit-name
state state-name

Configuring a PKI Domain

Remarks
Required
No entity exists by default
Optional
No common name is specified by
default.
No country code is specified by
default.
Optional
No FQDN name is specified by
default.
Optional
No IP address is specified by
default.
Optional
No locality is specified by default.
Optional
No organization is specified by
default.
Optional
No unit is specified by default.
Optional
No state or province is specified
by default.
1833