H3C Technologies H3C SecBlade LB Cards - Manual (Page 130)

119
3. Click Apply to destroy the existing RSA key pair and the corresponding local certificate.
Figure 48 RSA key pair destruction page
Retrieving and displaying a certificate
You can retrieve an existing CA certificate or local certificate from the CA server and save it locally. To
do so, you can use offline mode or online mode.
In offline mode, you must retrieve a certificate by an out-of-band means like FTP, disk, email and then
import it to the device. By default, the retrieved certificate is saved in a file under the root directory of the
device, and the file name is domain-name_ca.cer for the CA certificate, or domain-name_local.cer for
the local certificate.
To retrieve a certificate:
1. From the navigation tree, select Security > Certificate Management > Certificate.
2. Click Retrieve Cert.
Figure 49 PKI certificate retrieval page
3. Configure the parameters, as described in Table 18 .
4. Click Apply.
Table 18 Configuration items
Item Description
Domain Name Select the PKI domain for the certificate.
Certificate Type Select the type of the certificate to be retrieved, which can be CA or local.
Enable Offline
Mode Select this box to retrieve a certificate in offline mode (that is, by an out-of-band means
like FTP, disk, or email) and then import the certificate into the local PKI system.
Get File From
Device Specify the path and name of the certificate file to import:
• If the certificate file is saved on the device, select Get File From Device and then specify
the path and name of the file on the device. If no file is specified, the system, by
default, gets the file domain-name_ca.cer (for the CA certificate) or
domain-name_local.cer (for the local certificate) under the root directory of the device.
• If the certificate file is saved on a local PC, select Get File From PC and. then specify
the path and name of the file and specify the partition that saves the file.
Get File From PC