
By default, no PKI domain is configured on the AR1200-S.
Step 3
Run:
auto-enroll
[
percent
] [
regenerate
]
The automatic certificate enrollment and update function is enabled.
After the automatic certificate enrollment and update function is enabled, users do not need to
manually enroll certificates. When an external application requires a CA or local certificate, it
instructs the system to register a CA or local certificate.
----End
12.5.4 Creating a Self-signed Certificate or Local Certificate
A PKI device can generate a self-signed certificate or local certificate and issue the certificate
to a user.
Procedure
Step 1
Run:
system-view
The system view is displayed.
Step 2
Run:
pki create-certificate
[
self-signed
] {
filename
file-name
}
A self-signed certificate or local certificate is created.
----End
12.5.5 Checking the Configuration
After a certificate is obtained from a CA, or a self-signed certificate or local certificate is created,
you can view certificate information.
Procedure
l
Run the
display pki certificate
{
local
|
ca
}
pki-realm-name
[
verbose
] command to
check certificate information.
l
Run the
display pki certificate enroll-status
pki-realm-name
command to view the
certificate enrollment status.
----End
12.6 Configuring Certificate Authentication
Before a certificate is used, it must be authenticated.
12.6.1 Establishing the Configuration Task
Before configuring certificate authentication, familiarize yourself with the applicable
environment, complete the pre-configuration tasks, and obtain the data required for
configuration. This will help you complete the configuration task quickly and accurately.
Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security
12 PKI Configuration
Issue 02 (2012-03-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
247