Platform Considerations; References - Juniper JUNOSE 11.2.X IP SERVICES Configuration Manual

JunosE 11.2.x IP Services Configuration Guide

Platform Considerations

References

206
Table 14: Digital Certificate Terms and Acronyms (continued)
Term or
Abbreviation Description
CRL Certificate revocation list; a list of certificates that a CA has revoked
ESP Encapsulating Security Payload; provides data integrity, data confidentiality
and, optionally, sender's authentication
IKE Internet Key Exchange
PKCS Public-Key Cryptography Standards; a series of standards established by RSA
Laboratories
PKCS10 PKCS #10; describes a syntax for certification requests
Root CA CA that signs the certificates of subordinate CAs
Root certificate Self-signed public key certificate for a root CA; root certificates are used to
verify other certificates
RSA Rivest-Shamir-Adleman encryption algorithm
SA Security association; the set of security parameters that dictate how IPSec
processes a packet, including encapsulation protocol and session keys. A
single secure tunnel uses multiple SAs.
SCEP Simple certificate enrollment protocol; used to submit requests and to
download certificates and CRLs
Digital certificates are supported on all ERX routers that support configuration of IPSec.
For information about modules that support IPSec on ERX14xx models, ERX7xx models,
and the ERX310 Broadband Services Router:
See ERX Module Guide, Table 1, Module Combinations for detailed module specifications.
See ERX Module Guide, Appendix A, Module Protocol Support for information about the
modules that support IPSec.
NOTE: The E120 and E320 Broadband Services Routers do not support configuration
of IPSec and digital certificates.
For information about digital certificates, see the following references:
Copyright © 2010, Juniper Networks, Inc.