1-42) The RA reviews the identity of the entity and then sends the identity information and the public keywith a digital signature to the CA.3) The CA verifies the digital signature, approves the application, and issues a certificate.4) The RA receives the certificate from the CA, sends it to the LDAP server to provide directorynavigation service, and notifies the entity that the certificate is successfully issued.5) The entity retrieves the certificate. With the certificate, the entity can communicate with otherentities safely through encryption and digital signature.6) The entity makes a request to the CA when it needs to revoke its certificate, while the CA approvesthe request, updates the CRLs and publishes the CRLs on the LDAP server.PKI Configuration Task ListComplete the following tasks to configure PKI:Task RemarksConfiguring an Entity DN RequiredConfiguring a PKI Domain RequiredSubmitting a Certificate Request in Auto ModeSubmitting a PKI CertificateRequest Submitting a Certificate Request in ManualModeRequiredUse eitherapproachRetrieving a Certificate Manually OptionalConfiguring PKI Certificate OptionalDestroying a Local RSA Key Pair OptionalDeleting a Certificate OptionalConfiguring an Access Control Policy OptionalConfiguring an Entity DNA certificate is the binding of a public key and the identity information of an entity, where the identityinformation is identified by an entity distinguished name (DN). A CA identifies a certificate applicantuniquely by entity DN.An entity DN is defined by these parameters:z Common name of the entity.z Country code of the entity, a standard 2-character code. For example, CN represents China andUS represents the United States of America.z Fully qualified domain name (FQDN) of the entity, a unique identifier of an entity on the network. Itconsists of a host name and a domain name and can be resolved to an IP address. For example,www.whatever.com is an FQDN, where www is a host name and whatever.com a domain name.z IP address of the entity.z Locality where the entity resides.z Organization to which the entity belongs.z Unit of the entity in the organization.z State where the entity resides.
