H3C Technologies H3C SecBlade LB Cards - Manual (Page 132)

121
Figure 52 CRL information
PKI configuration examples
This section provides examples of configuring PKI.
Certificate request from a Windows 2003 CA server
1. Network requirements
As shown in Figure 53 , configure the LB product to work as the PKI entity, so that:
• The LB product submits a local certificate request to the CA server, which runs Windows 2003
server operating system.
• The LB product retrieves CRLs for certificate verification.
Figure 53 Network diagram
2. Configuring the CA server
a. Install the CA server component:
{
Select Control Panel > Add or Remove Programs from the start menu.
{
Select Add/Remove Windows Components.
{
Select Certificate Services in the pop-up dialog box.