Huawei AR1200-S User Manual

12.4 Configuring a PKI Domain
Before an entity applies for a PKI certificate, registration information needs to be configured
for the entity. A set of the registration information is the PKI domain of the entity.
12.4.1 Establishing the Configuration Task
Before configuring a PKI domain, familiarize yourself with the applicable environment,
complete the pre-configuration tasks, and obtain the data required for configuration. This will
help you complete the configuration task quickly and accurately.
Applicable Environment
A PKI domain is a set of identity information required when a PKI entity enrolls a certificate.
A PKI domain allows other applications, such as Internet Key Exchange (IKE) and Secure
Sockets Layer (SSL), to reference the PKI configuration easily. A PKI domain configured on a
device is unavailable to CAs or other devices. Each PKI domain has its own domain parameters.
Pre-configuration Tasks
Before creating a PKI domain, complete the following task:
l Creating a PKI entity
Data Preparation
To configure a PKI domain, you need the following data.
No.
Data
1 PKI domain name
2 Bound PKI entity name
3 Trusted CA name and enrollment URL
4 (Optional) CA root certificate fingerprint
5 (Optional) Certificate revocation password, Rivest, Shamir,
and Adelman (RSA) key length, source IP address used in
TCP connection setup
12.4.2 Creating a PKI Domain
A PKI domain is a set of identity information required when a PKI entity enrolls a certificate.
A PKI domain allows other applications, such as Internet Key Exchange (IKE) and Secure
Sockets Layer (SSL), to reference the PKI configuration easily.
Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security 12 PKI Configuration
Issue 02 (2012-03-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
240

Huawei AR1200-S Specifications

General

Brand	Huawei
Model	AR1200-S
Category	Network Router
Language	English