HP FlexNetwork NJ5000, Руководство пользователя

Страница: 346 / 475

334
Destroying the RSA key pair
1.
From the navigation tree, select
Authentication
>
Certificate Management
.
2.
Click the
Certificate
tab.
3.
Click
Destroy Key
.
4.
Click
Apply
to destroy the existing RSA key pair and the corresponding local certificate.
Figure 357 Key pair destruction page
Retrieving and displaying a certificate
You can retrieve an existing CA certificate or local certificate from the CA server and save it locally. To
do so, you can use offline mode or online. In offline mode, you must retrieve a certificate by an
out-of-band means like FTP, disk, email and then import it into the local PKI system. By default, the
retrieved certificate is saved in a file under the root directory of the device, and the filename is
domain-name
_ca.cer for the CA certificate, or
domain-name_local.cer
for the local certificate.
To retrieve a certificate:
1.
From the navigation tree, select
Authentication
>
Certificate Management
.
2.
Click the
Certificate
tab.
3.
Click
Retrieve Cert
.
Figure 358 PKI certificate retrieval page
4.
Configure the parameters, as described in Table 118 .
5.
Click
Apply
.
Table 118 Configuration items
Item Description
Domain Name Select the PKI domain for the certificate.
Certificate Type Select the type of the certificate to be retrieved, which can be CA or local.
Enable Offline Click this box to retrieve a certificate in offline mode (that is, by an out-of-band means