H3C S5600 Series Operation Manual page 1185

The configuration of an entity DN must comply with the CA certificate issue policy. You need to
determine, for example, which entity DN parameters are mandatory and which are optional. Otherwise,
certificate request may be rejected.
Follow these steps to configure an entity DN:
To do...
Enter system view
Create an entity and enter its view
Configure the common name for
the entity
Configure the country code for the
entity
Configure the FQDN for the entity
Configure the IP address for the
entity
Configure the locality of the entity
Configure the organization name
for the entity
Configure the unit name for the
entity
Configure the state or province for
the entity
Currently, up to two entities can be created on a device.
The Windows 2000 CA server has some restrictions on the data length of a certificate request. If
the entity DN in a certificate request goes beyond a certain limit, the server will not respond to the
certificate request.
Use the command...
system-view
pki entity entity-name
common-name name
country country-code-str
fqdn name-str
ip ip-address
locality locality-name
organization org-name
organization-unit org-unit-name
state state-name
1-5
Remarks
—
Required
No entity exists by default.
Optional
No common name is specified by
default.
Optional
No country code is specified by
default.
Optional
No FQDN is specified by default.
Optional
No IP address is specified by
default.
Optional
No locality is specified by default.
Optional
No organization is specified by
default.
Optional
No unit is specified by default.
Optional
No state or province is specified by
default.