Configuring An Infranet Controller Certificate Server Instance; Procedure); Configuring An Infranet Controller Certificate Server Instance (Nsm Procedure) - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual

NSM Infranet Controller Configuration Guide
Related
Documentation

Configuring an Infranet Controller Certificate Server Instance (NSM Procedure)

124
Configuring an Infranet Controller NIS Server Instance (NSM Procedure) on page 133
Creating an Authentication Realm (NSM Procedure) on page 87
The certificate server feature allows users to authenticate based on attributes contained
in client-side certificates. You may use certificate server by itself or in conjunction with
another server to authenticate users and map them to roles.
Import the CA certificate used to sign the client-side certificates.
To configure certificate server instance:
In the NSM navigation tree, select Device Manager> Devices.
1.
Click the Device Tree tab, and then double-click the Infranet Controller for which you
2.
want to configure a certificate server instance.
Click the Configuration tab. In the configuration tree, use settings in the System >
3.
Configuration > Certificates > CA Certificates tab to import the CA certificate used
to sign the client-side certificates.
Configure the certificate server instance, by selecting Authentication > Auth Servers.
4.
Then add or modify certificate server settings as specified in Table 40 on page 124.
Click one:
5.
OK—Saves the changes.
Cancel—Cancels the modifications.
Table 40: Certificate Server Instance Configuration Details
Option
Auth Server Name
Auth Server Type
Certificate Settings
User Name Template
Server Catalog > Expressions tab
Name
Function
Specifies a name for the
auth server.
Specifies the auth server
type.
Specifies how the Infranet
Controller should construct
a username.
Specifies a name for the
user expression in the
certificate server user
directory.
Your Action
Enter a name for the auth server.
Select Certificate Server.
Enter any combination of certificate
variables contained in angle brackets
and plain text.
Enter a name for the user expression.
Copyright © 2010, Juniper Networks, Inc.