Figure 4, Figure 5 – H3C Technologies H3C SecPath F1000-E User Manual
Page 782
8
Figure 4 PKI domain list
Figure 5 PKI domain configuration page
describes the configuration items for creating a PKI domain.
Table 4 PKI domain configuration items
Item Description
Domain Name
Type the name for the PKI domain.
CA Identifier
Type the identifier of the trusted CA.
An entity requests a certificate from a trusted CA. The trusted CA takes the responsibility
of certificate registration, distribution, and revocation, and query.
IMPORTANT:
z
In offline mode, this item is optional; while in other modes, this item is required.
z
The CA identifier is required only when you retrieve a CA certificate. It is not used
during local certificate request.
Entity Name
Select the local PKI entity.
When submitting a certificate request to a CA, an entity needs to show its identity
information.
Available PKI entities are those that have been configured on the Web interface you can
enter by selecting VPN > PKI > Entity.
Institution
Select the authority for certificate request.
•
CA: Indicates that the entity requests a certificate from a CA.
•
RA: Indicates that the entity requests a certificate from an RA.