Configuring An Entity Dn - H3C S5500-EI series Operation Manual

Operation Manual – PKI
H3C S5500-EI Series Ethernet Switches

1.3 Configuring an Entity DN

A certificate is the binding of a public key and the identity information of an entity, where
the identity information is identified by an entity distinguished name (DN). A CA
identifies a certificate applicant uniquely by entity DN.
An entity DN is defined by these parameters:
Common name of the entity.
Country code of the entity, a standard 2-character code. For example, CN
represents China and US represents the United States of America.
Fully qualified domain name (FQDN) of the entity, a unique identifier of an entity
on the network. It consists of a host name and a domain name and can be
resolved to an IP address. For example, www.whatever.com is an FQDN, where
www is a host name and whatever.com a domain name.
IP address of the entity.
Locality where the entity resides.
Organization to which the entity belongs.
Unit of the entity in the organization.
State where the entity resides.
Note:
The configuration of an entity DN must comply with the CA certificate issue policy. You
need to determine, for example, which entity DN parameters are mandatory and which
are optional. Otherwise, certificate request may be rejected.
Follow these steps to configure an entity DN:
Enter system view
Create an entity and enter
its view
Configure the common
name for the entity
Configure the country
code for the entity
Configure the FQDN for
the entity
To do...
system-view
pki entity entity-name
common-name name
country country-code-str
fqdn name-str
Use the command...
1-5
Chapter 1 PKI Configuration
Remarks
—
Required
No entity exists by default.
Optional
No common name is
specified by default.
Optional
No country code is
specified by default.
Optional
No FQDN is specified by
default.