J Plus Juni JLT622P, Руководство пользователя

Страница: 42 / 88

J Plus, Inc
www.juniglobal.com
J Plus Proprietary and Confidential
42/88
7.2.2.2 CA Certificates
CA certificates can be handled in 'CA Certificates' page.
This page allows to import and delete CA certificates and shows the information of chosen CA certificate in a box.
To pass the trust chain status (the last status in the table mentioned above) in PKI Status section, the current
eNodeB certificate must be issued by current CA certificate stored in the eNodeB.
Figure 29: Trusted CA Certificates
7.2.2.3 CMPv2
CMP can be handled in 'CMPv2' page.
In the first table, named 'CMP Server Information', all the CMP server configurations can be set up such as CMP
server URL and port number. Also, Key Update Request margin time can be configured with unit of days, which
decides automatically to send Key Update Request (KUR) to CMP server depending on KUR days.
In the second table, named 'CMPv2 Request', all the CMP actions can be handled manually. There are three
request options can be chosen one at a time.
The first option, called 'IR-by Ref. value and IAK' (IAK based IR), sends Initial Request (IR) message with
reference value and shared secret (IAK: Initial Authentication Key) for initial registration. Reference value and IAK
should be provided by the vendor.
The second option, called 'IR-by the installed certificate' (certificate-based IR), sends IR with pre-installed eNodeB
private key and certificate issued by the vendor. eNodeB private key and certificate should be provided by the
vendor and pre-installed before sending the IR. Please refer Section 7.2.2.1 eNodeB and 7.2.2.2 CA Certificate
to install the proper private key and certificates.
The third, last, option, called 'KUR-for certificate renewal' (certificate renewal), sends Key Update Request
message for prompt Key Update.
The very bottom box, called 'Result of CMPv2 Request', shows the information and/or logs of actions done by the
three options above.