J Plus Juni JLT622P, Руководство пользователя

Страница: 40 / 88

J Plus, Inc
www.juniglobal.com
J Plus Proprietary and Confidential
40/88
7.2.2 PKI Menu
PKI (Public Key Infrastructure) section controls eNodeB private key and certificate, CA certificate, and CMP
request messages. The section contains three individual pages i.e., eNodeB, CA Certificate, and CMPv2.
7.2.2.1 eNodeB
eNodeB private key and certificate can be handled in 'eNodeB' page.
The first table, called 'eNodeB Private Key', controls eNodeB private keys. There are two options can be chosen
one at a time. The first option, called 'Generate key internally', allows to generate eNodeB private key internally
and this will be continued in CSR table. The second option, called 'Import key externally', allows to import an
eNodeB private key paired with eNodeB certificate which will also be mentioned in eNodeB Certificate table.
Generating or importing private key will delete current private key stored in the eNodeB if any exists. Also,
passphrase may be required to import a private key.
The second table, called 'eNodeB Certificate', allows to import an eNodeB certificate which must be paired with
the private key imported above. The box displays the information of current eNodeB certificate stored in the
eNodeB. If any exists, current certificate will be deleted when new certificate is imported.
The third table in CSR section, called 'eNodeB CSR (Certificate Signing Request)', allows to generate CSR based
on current private key and to export the generated CSR. User specific subject DN can be inserted or just AP
specific CN value will be used as subject DN which is a format of model-serial Number as a default.
The fourth, last, table in PKI Status section, called 'Private key and Certificates Status', shows current status of
PKI system i.e., pairness of private key and certificate, validity of certificate, and trust chain between certificate
and CA certificate. The last one will be mentioned again in CA Certificates page later.
The third table in CSR section, called 'eNodeB CSR (Certificate Signing Request)', allows to generate CSR based
on current private key and to export the generated CSR. User specific subject DN can be inserted or just AP
specific CN value will be used as subject DN which is a format of model-serial Number as a default.
The fourth, last, table in PKI Status section, called 'Private key and Certificates Status', shows current status of
PKI system i.e., pairness of private key and certificate, validity of certificate, and trust chain between certificate
and CA certificate. The last one will be mentioned again in CA Certificates page later.