Chapter 16. PKI configuration
The following sections describe the XIV Command Line Interface (XCLI) for PKI
configuration.
The sections are listed as follows:
v
pki_list(Listing PKI items)
v
pki_generate_csr(Generate Certificate Signing Request)
v
pki_generate_private_key_and_csr(Generate a Private Key and CSR)
v
pki_remove(Delete a PKI Content)
v
pki_rename(Change PKI Symbolic Name)
v
pki_set_pem(Import Signed Certificate In PEM format)
v
pki_set_pkcs12(Import PKCS#12 Certificate)
v
pki_show_certificate(Show Signed Certificate Details)
v
pki_update(Update PKI Certificate or Services)
Listing PKI Items
Listing PKI items
pki_list
XIV allows you to install certificates generated by your own Certificate Authority
(CA) for the different services that use digital certificates (SSL authentication,
IPSec, etc). When you install a certificate in XIV, it is associated with a name that
you provide which is used for managing it.
Certificates can be installed in one of two ways, depending on your site PKI
policy:
v
XIV generated - this method does not expose the XIV private key
– XIV generates a public-private keypair
– XIV exports the public key in a Certificate Signing Request (CSR) file using
pki_generate_private_key_and_csr
– The CA signs this file, returning a .PEM file that is then imported into the
XIV using pki_set_pem
v
The CA generates both the key pair and associated certificate. Both are provided
in a password-protected PKCS#12 file.
– This file is imported into the XIV using pki_set_pkcs12.
XIV generated - this method does not expose the XIV private key XIV generates a
public-private keypair XIV exports the public key in a Certificate Signing Request
(CSR) file using pki_generate_private_key_and_csr The CA signs this file, returning
a .PEM file that is then imported into the XIV using pki_set_pem CA generated
The CA generates both the key pair and associated certificate. Both are provided in
a password-protected PKCS#12 file. This file is imported into the XIV using
pki_set_pkcs12.
The pki_list command lists the following information:
v
Name
337
Содержание XIV STORAGE SYSTEM
Страница 1: ...Version 11 4 x IBM XIV Storage System User Manual GC27 3914 05...
Страница 10: ...4 IBM XIV Storage System User Manual...
Страница 42: ...36 IBM XIV Storage System User Manual...
Страница 66: ...60 IBM XIV Storage System User Manual...
Страница 68: ...62 IBM XIV Storage System User Manual...
Страница 82: ...76 IBM XIV Storage System User Manual...
Страница 106: ...100 IBM XIV Storage System User Manual...
Страница 124: ...118 IBM XIV Storage System User Manual...
Страница 140: ...134 IBM XIV Storage System User Manual...
Страница 180: ...174 IBM XIV Storage System User Manual...
Страница 202: ...196 IBM XIV Storage System User Manual...
Страница 264: ...258 IBM XIV Storage System User Manual...
Страница 352: ...346 IBM XIV Storage System User Manual...
Страница 405: ...User Category Permission Technicians Allowed Chapter 19 Fibre Channel and iSCSI Configuration and Status 399...
Страница 406: ...400 IBM XIV Storage System User Manual...
Страница 476: ...470 IBM XIV Storage System User Manual...
Страница 486: ...480 IBM XIV Storage System User Manual...
Страница 640: ...634 IBM XIV Storage System User Manual...
Страница 642: ...636 IBM XIV Storage System User Manual...
Страница 651: ......
Страница 652: ...Printed in USA GC27 3914 05...