Configuring A Pki Domain - 3Com Switch 4800G 24-Port Configuration Manual

Configuring a PKI
Domain
Follow these steps to configure an entity DN:
To do...
Enter system view
Create an entity and enter its
view
Configure the common name
for the entity
Configure the country code
for the entity
Configure the FQDN for the
entity
Configure the IP address for
the entity
Configure the locality of the
entity
Configure the organization
name for the entity
Configure the unit name for
the entity
Configure the state or
province for the entity
n
Currently, up to two entities can be created on a device.
■
Windows 2000 CA server has some restrictions on the data length of a
■
certificate request. If the entity DN in a certificate request goes beyond a
certain limit, the server does not respond to the certificate request.
Before requesting a PKI certificate, an entity needs to be configured with some
enrollment information, which is referred to as a PKI domain. A PKI domain is
intended only for convenience of reference by other applications, and has only
local significance.
A PKI domain is defined by these parameters:
Trusted CA
■
An entity requests a certificate from a trusted CA.
Entity
■
A certificate applicant uses an entity to provide its identity information to a CA.
Use the command...
system-view
pki entity entity-name
common-name name
country country-code-str
fqdn name-str
ip ip-address
locality locality-name
organization org-name
organization-unit
org-unit-name
state state-name

Configuring a PKI Domain

Remarks
-
Required
No entity exists by default.
Optional
No common name is specified
by default.
Optional
No country code is specified
by default.
Optional
No FQDN is specified by
default.
Optional
No IP address is specified by
default.
Optional
No locality is specified by
default.
Optional
No organization is specified by
default.
Optional
No unit is specified by default.
Optional
No state or province is
specified by default.
1223