H3C Technologies H3C SecBlade LB Cards - Manual (Page 128)

117
Item Description
CRL Update Period
Enter the CRL update period, that is, the interval at which the PKI entity downloads the
latest CRLs.
This item is available after you click the Enable CRL Checking box.
By default, the CRL update period depends on the next update field in the CRL file.
IMPORTANT:
The manually configured CRL update period takes precedent over that specified in the CRL
file.
CRL URL
Enter the URL of the CRL distribution point. The URL can be an IP address or a domain
name.
This item is available after you click the Enable CRL Checking box.
When the URL of the CRL distribution point is not set, you should acquire the CA
certificate and a local certificate, and then acquire a CRL through SCEP.
Generating an RSA key pair
1. From the navigation tree, select Security > Certificate Management > Certificate.
Figure 44 Certificate list
2. Click Create Key.
Figure 45 RSA key pair generation page
3. Enter the key length.
4. Click Apply.