HP 5800 Series Configuration Manual page 78

# Create a certificate attribute group mygroup1, and configure a certificate attribute rule, specifying that the
Distinguished Name (DN) in the subject name includes the string of new-ca.
[Device] pki certificate attribute-group mygroup1
[Device-pki-cert-attribute-group-mygroup1] attribute 1 issuer-name dn ctn new-ca
[Device-pki-cert-attribute-group-mygroup1] quit
# Create a certificate attribute-based access control policy myacp. Configure a certificate attribute-based
access control rule, specifying that a certificate is considered valid when it matches an attribute rule in
certificate attribute group myacp.
[Device] pki certificate access-control-policy myacp
[Device-pki-cert-acp-myacp] rule 1 permit mygroup1
[Device-pki-cert-acp-myacp] quit
# Associate the HTTPS service with SSL server policy myssl.
[Device] ip https ssl-server-policy myssl
# Associate the HTTPS service with certificate attribute-based access control policy myacp.
[Device] ip https certificate access-control-policy myacp
# Enable the HTTPS service.
[Device] ip https enable
# Create a local user named usera, set the password to 123 for the user, and specify the Telnet service type
for the local user.
[Device] local-user usera
[Device-luser-usera] password simple 123
[Device-luser-usera] service-type telnet
Configure the host that acts as the HTTPS client
2.
On the host, run the IE browser. In the address bar, enter http://10.1.2.2/certsrv and request a certificate for
the host as prompted.
Verify the configuration
3.
Enter https://10.1.1.1 in the address bar, and select the certificate issued by new-ca. Then the web login
page of the Device appears. On the login page, type the username usera, and password 123 to enter the
web management page.
To log in to the web interface through HTTPS, enter the URL address starting with https://. To log in to the
web interface through HTTP, enter the URL address starting with http://.
For more information about PKI configuration commands, see Security Command Reference.
•
For more information about the public-key local create rsa command, see Security Command Reference.
•
For more information about SSL configuration commands, see Security Command Reference.
•
71