1-4Task RemarksConfiguring an Entity DN RequiredConfiguring a PKI Domain RequiredSubmitting a Certificate Requestin Auto ModeSubmitting a PKI CertificateRequest Submitting a Certificate Requestin Manual ModeRequiredUse either approachRetrieving a Certificate Manually OptionalConfiguring PKI Certificate OptionalDestroying a Local RSA Key Pair OptionalDeleting a Certificate OptionalConfiguring an Access Control Policy OptionalConfiguring an Entity DNA certificate is the binding of a public key and the identity information of an entity, where the identityinformation is identified by an entity distinguished name (DN). A CA identifies a certificate applicantuniquely by entity DN.An entity DN is defined by these parameters:z Common name of the entity.z Country code of the entity, a standard 2-character code. For example, CN represents China andUS represents the United States of America.z Fully qualified domain name (FQDN) of the entity, a unique identifier of an entity on the network. Itconsists of a host name and a domain name and can be resolved to an IP address. For example,www.whatever.com is an FQDN, where www is a host name and whatever.com a domain name.z IP address of the entity.z Locality where the entity resides.z Organization to which the entity belongs.z Unit of the entity in the organization.z State where the entity resides.The configuration of an entity DN must comply with the CA certificate issue policy. You need todetermine, for example, which entity DN parameters are mandatory and which are optional. Otherwise,certificate request may be rejected.Follow these steps to configure an entity DN:To do… Use the command… RemarksEnter system view system-view —Create an entity and enter its view pki entity entity-name RequiredNo entity exists by default.
