12.6.4 Checking the Configuration
After the certificate authentication mode is configured, you can view certificate information.
Procedure
l
Run the
display pki certificate enroll-status
pki-realm-name
command to check the
certificate enrollment status.
l
Run the
display pki crl
pki-realm-name
command to check CRL information.
----End
12.7 Managing Certificates
Managing certificates include deleting, importing, and exporting certificates, and configuring
the default path where certificates are stored.
12.7.1 Deleting a Certificate
When a certificate expires or a user wants to request a new certificate, you can delete the existing
certificate.
Procedure
Step 1
Run:
system-view
The system view is displayed.
Step 2
Run:
pki delete-certificate
{
ca
|
local
|
ocsp
}
pki-realm-name
The certificate is deleted.
----End
12.7.2 Importing a Certificate
To use an external certificate, copy it to a storage device in an outband way and import it to the
AR1200-S.
Procedure
Step 1
Run:
system-view
The system view is displayed.
Step 2
Run:
pki import-certificate
{
ca
|
local
|
ocsp
}
pki-realm-name
{
der
|
pkcs12
|
pem
}
The external certificate is imported to the AR1200-S.
----End
Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security
12 PKI Configuration
Issue 02 (2012-03-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
250