Deleting A Certificate; Configuring An Access Control Policy - 3Com MSR 50 Series Configuration Manual

Deleting a Certificate

Configuring an Access
Control Policy
To do...
Enter system view
Destroy a local RSA key pair
n
For details about the public-key local destroy rsa command, refer to
Configuration" on page
When a certificate requested manually is about to expire or you want to request a
new certificate, you need to delete the current local certificate or CA certificate.
Follow these steps to delete a certificate:
To do...
Enter system view
Delete certificates
By configuring a certificate attribute-based access control policy, you can take
further control of access to the server, providing additional security for the server.
Follow these steps to configure a certificate attribute-based access control policy:
To do...
Enter system view
Create a certificate attribute
group and enter its view
Configure an attribute rule for
the certificate issuer name,
certificate subject name or
alternative subject name
Return to system view
Create a certificate
attribute-based access control
policy and enter its view
Configure a certificate
attribute-based access control
rule
c
CAUTION: A certificate attribute group must exist to be associated with a rule.
Use the command...
system-view
public-key local destroy rsa
1919.
Use the command...
system-view
pki delete-certificate { ca | local }
domain domain-name
Use the command...
system-view
pki certificate
attribute-group group-name
attribute id
{ alt-subject-name { fqdn |
ip } | { issuer-name |
subject-name } { dn | fqdn |
ip } } { ctn | equ | nctn |
nequ} attribute-value
quit
pki certificate
access-control-policy
policy-name
rule [ id ] { deny | permit }
group-name
Deleting a Certificate 1839
Remarks
-
Required
"SSH2.0
Remarks
-
Required
Remarks
-
Required
No certificate attribute group
exists by default
Optional
There is no restriction on the
issuer name, certificate
subject name and alternative
subject name by default.
-
Required
No access control policy exists
by default.
Required
No access control rule exists
by default.