Configuring A Pki Domain - HP 5920 Series Configuration Manual
Hide thumbs
Also See for 5920 Series:
- Command reference manual (607 pages) ,
- Configuration manual (424 pages) ,
- Fc and fcoe configuration manual (257 pages)
Table of Contents
Step
4.
Set the country code of the
entity.
5.
Set the locality of the entity.
6.
Set the organization of the
entity.
7.
Set the unit of the entity in
the organization.
8.
Set the state where the entity
resides.
9.
Set the FQDN of the entity.
10.
Configure the IP address of
the entity.
Configuring a PKI domain
A PKI domain contains enrollment information for a PKI entity. It is locally significant and is intended only
for reference by other applications like SSL.
The fingerprint of a CA root certificate is the hash value of the root certificate content. Each CA root
certificate has a unique hash value. You can specify the fingerprint used for verifying the root certificate
in the PKI domain.
After receiving a CA root certificate that does not exist locally, the PKI entity verifies the fingerprint of the
root certificate in the following cases:
For an obtained or imported CA root certificate, if its fingerprint does not match the one configured
•
for the PKI domain, the device rejects the root certificate, and the obtain or import operation fails.
If you do not specify the fingerprint for the PKI domain, the system asks you to verify the fingerprint
manually.
•
For an obtained CA root certificate in an automatic local certificate request process that an
application triggers, if its fingerprint does not match the one configured for the PKI domain, the
device rejects the root certificate, and the local certificate request fails. If you do not specify the
fingerprint for the PKI domain, the local certificate request fails.
To configure a PKI domain:
Step
1.
Enter system view.
2.
Create a PKI domain
and enter its view.
Command
country country-code-string
locality locality-name
organization org-name
organization-unit org-unit-name
state state-name
fqdn fqdn-name-string
ip { ip-address | interface
interface-type
interface-number }
Command
system-view
pki domain domain-name
122
Remarks
By default, the country code is not set.
By default, the locality is not set.
By default, the organization is not set.
By default, the unit is not set.
By default, the state is not set.
By default, the FQDN is not set.
By default, the IP address is not
configured.
Remarks
N/A
By default, no PKI domains exist.
Table of Contents
Troubleshooting
