3Com 3C13636 Configuration Manual page 995

3Com Router 3000 Ethernet Family
Configuration Guide
9.1.2 Terminology............................................................................................................. 9-2
9.1.3 Applications ............................................................................................................. 9-2
9.1.4 Configuration Task List ........................................................................................... 9-2
9.2 Certificate Request Configuration...................................................................................... 9-3
9.2.1 Certificate Request Overview.................................................................................. 9-3
9.2.2 Entering PKI Domain View...................................................................................... 9-3
9.2.3 Specifying a Trustworthy CA................................................................................... 9-4
9.2.4 Configuring Servers for Certificate Request ........................................................... 9-5
9.2.5 Configuring Entity Name Space .............................................................................. 9-7
9.2.6 Creating a Local Public -- Private Key Pair........................................................... 9-11
9.2.7 Configuring Polling Interval and Count ................................................................. 9-12
9.2.8 Configuring Certificate Request Mode .................................................................. 9-12
9.2.9 Delivering a Certificate Request Manually ............................................................ 9-13
9.2.10 Retrieving a Certificate Manually ........................................................................ 9-13
9.2.11 Importing an Certificate ....................................................................................... 9-14
9.2.12 Deleting a Certificate........................................................................................... 9-14
9.3 Certificate Validation Configuration ................................................................................. 9-15
9.3.1 Configuration Task List ......................................................................................... 9-15
9.3.2 Specifying CRL Distribution Point location............................................................ 9-15
9.3.3 Configuring CRL Update Period............................................................................ 9-15
9.3.4 Enabling/Disabling CRL Check ............................................................................. 9-16
9.3.5 Retrieving a CRL ................................................................................................... 9-16
9.3.6 Verifying Certificate Validity .................................................................................. 9-16
9.4 Display and Debug .......................................................................................................... 9-17
9.5 Typical Configuration Examples ...................................................................................... 9-18
9.5.1 IKE Authentication with PKI Certificate ................................................................. 9-18
9.6 Troubleshooting ............................................................................................................... 9-21
9.6.1 Fault 1: Failing to Retrieve a CA Certificate.......................................................... 9-21
9.6.2 Fault 2: Failing to Request a Local Certificate ...................................................... 9-21
9.6.3 Fault 3: Failing to Retrieve a CRL ......................................................................... 9-21
3Com Corporation
v
Table of Contents