H3C Technologies H3C SecPath F1000-E - Manual (Page 313)

301
Figure 202 Retrieving the CA certificate
5. Request a local certificate:
a. From the navigation tree, select VPN > Certificate Management > Certificate.
b. Click Request Cert.
c. Select 1 for the PKI domain, and click Apply.
The system displays "Certificate request has been submitted."
d. Click OK to confirm.
Figure 203 Requesting a local certificate
6. Retrieve the CRL:
a. From the navigation tree, sfter retrieving a local certificate, select VPN > Certificate
Management > CRL.
b. Click Retrieve CRL of the PKI domain of 1.
Figure 204 Retrieving the CRL
7. Configure IKE proposal 1, using RSA signature for identity authentication:
a. From the navigation tree, select VPN > IKE > Proposal.
b. Click Add.
c. Enter 1 as the IKE proposal number, select RSA Signature as the authentication method, and
click Apply.