Configuring An Entity Dn - 3Com 4500G Family Configuration Manual

Configuring an Entity DN

Configuring a PKI Domain
Submitting a PKI Certificate
Request
Retrieving a Certificate Manually
Configuring PKI Certificate
Destroying a Local RSA Key Pair
Deleting a Certificate
Configuring an Access Control Policy
Configuring an Entity DN
A certificate is the binding of a public key and the identity information of an entity, where the identity
information is identified by an entity distinguished name (DN). A CA identifies a certificate applicant
uniquely by entity DN.
An entity DN is defined by these parameters:
Common name of the entity.
Country code of the entity, a standard 2-character code. For example, CN represents China and
US represents the United States of America.
Fully qualified domain name (FQDN) of the entity, a unique identifier of an entity on the network. It
consists of a host name and a domain name and can be resolved to an IP address. For example,
www.whatever.com is an FQDN, where www is a host name and whatever.com a domain name.
IP address of the entity.
Locality where the entity resides.
Organization to which the entity belongs.
Unit of the entity in the organization.
State where the entity resides.
The configuration of an entity DN must comply with the CA certificate issue policy. You need to
determine, for example, which entity DN parameters are mandatory and which are optional. Otherwise,
certificate request may be rejected.
Follow these steps to configure an entity DN:
To do...
Enter system view
Create an entity and enter its view
Task
Submitting a Certificate Request
in Auto Mode
Submitting a Certificate Request
in Manual Mode
Use the command...
system-view
pki entity entity-name
1-4
Remarks
Required
Required
Required
Use either approach
Optional
Optional
Optional
Optional
Optional
Remarks
—
Required
No entity exists by default.