Juniper JUNOSE 11.2.X IP SERVICES, Configuration Manual

Page: 232 / 356

Table 14: Digital Certificate Terms and Acronyms (continued)
Description
Term or
Abbreviation
Certificate revocation list; a list of certificates that a CA has revoked CRL
Encapsulating Security Payload; provides data integrity, data confidentiality
and, optionally, sender's authentication ESP
Internet Key Exchange IKE
Public-Key Cryptography Standards; a series of standards established by RSA
Laboratories PKCS
PKCS #10; describes a syntax for certification requests PKCS10
CA that signs the certificates of subordinate CAs Root CA
Self-signed public key certificate for a root CA; root certificates are used to
verify other certificates Root certificate
Rivest-Shamir-Adleman encryption algorithm RSA
Security association; the set of security parameters that dictate how IPSec
processes a packet, including encapsulation protocol and session keys. A
single secure tunnel uses multiple SAs. SA
Simple certificate enrollment protocol; used to submit requests and to
download certificates and CRLs SCEP
Platform Considerations
Digital certificates are supported on all ERX routers that support configuration of IPSec.
For information about modules that support IPSec on ERX14xx models, ERX7xx models,
and the ERX310 Broadband Services Router:
• See ERX Module Guide, Table 1, Module Combinations for detailed module specifications.
•
See ERX Module Guide, Appendix A, Module Protocol Support for information about the
modules that support IPSec.
NOTE: The E120 and E320 Broadband Services Routers do not support configuration
of IPSec and digital certificates.
References
For information about digital certificates, see the following references:
Copyright © 2010, Juniper Networks, Inc. 206
JunosE 11.2.x IP Services Configuration Guide