C613-50102-01 REV C
Command Reference for x510 Series
1871
AlliedWare Plus™ Operating System - Version 5.4.6-1.x
P
UBLIC
K
EY
I
NFRASTRUCTURE
C
OMMANDS
SUBJECT
-
NAME
(
TRUSTPOINT
CONFIGURATION
)
subject-name (trustpoint configuration)
Overview
Use this command to specify the distinguished name string that should be used for
the subject field in the server certificate, when enrolling the server (generating the
server certificate or server certificate signing request).
Syntax
subject-name <
word
>
Default
If no subject name is specified for the trustpoint, then the system automatically
builds a name of the form “/O=AlliedWare Plus/CN=xxxx.yyyy.zzz”, where “xxxx” is
the hostname of the system and “yyyy.zzz” is the default search domain for the
system.
Mode
Trustpoint Configuration
Usage
The subject name is specified as a variable number of fields, where each field
begins with a forward-slash character (“/”). Each field is of the form “XX=value”,
where “XX” is the abbreviation of the node type in the tree.
Common values include:
•
“C” (country),
•
“ST” (state),
•
“L” (locality),
•
“O” (organization),
•
“OU” (organizational unit), and
•
“CN” (common name).
Of these fields, “CN” is usually the most important.
NOTE
:
For a server certificate, many applications require that the network name of the
server matches the common name in the server’s certificate.
Example
To configure the trustpoint named "example" and set its subject name, use the
following commands:
awplus>
enable
awplus#
configure terminal
awplus(config)#
crypto pki trustpoint example
awplus(ca-trustpoint)#
subject-name "/O=My
Company/CN=192.168.1.1
Parameter
Description
<word>
Specify the subject name as a distinguished name string.
Complex strings (e.g., strings containing spaces) should be
surrounded with double-quote characters.