H3C Technologies H3C SecPath F1000-E - Manual (Page 302)

290
Figure 185 Adding a PKI entity
2. Create a PKI domain:
a. From the navigation tree, select VPN > Certificate Management > Domain.
b. Click Add.
c. In the upper area of the page, enter torsa as the PKI domain name, enter CA server as the CA
identifier, select aaa as the local entity, select RA as the authority for certificate request, enter
http://4.4.4.1:8080/certsrv/mscep/mscep.dll as the URL for certificate request (the URL must
be in the format of http://host:port/certsrv/mscep/mscep.dll, where host and port are the
host address and port number of the CA server), and select Manual as the certificate request
mode.
d. Click Apply.
The system displays "Fingerprint of the root certificate not specified. No root certificate
validation will occur. Continue?"
e. Click OK to confirm.