Administrator Guide

X.509v3
Dell Networking OS supports X.509v3 standards.
Topics:
• Introduction to X.509v3 certication
• X.509v3 support in Dell Networking OS
• Information about installing CA certicates
• Information about Creating Certicate Signing Requests (CSR)
• Information about installing trusted certicates
• Transport layer security (TLS)
• Online Certicate Status Protocol (OSCP)
• Verifying certicates
• Event logging
Introduction to X.509v3 certication
X.509v3 is a standard for public key infrastructure (PKI) to manage digital certicates and public key encryption.
The X.509v3 standard species a format for public-key certicates or digital certicates.
Transport Layer Security (TLS) relies on public key certicates to work.
X.509v3 certicates
A X.509v3 or digital certicate is an electronic document used to prove ownership of a public key. It contains information about the key's
identity, information about the key's owner, and the digital signature of an entity that has veried the certicate's content as correct.
Certicate authority (CA)
The entity that veries the contents of the digital certicate and signs it indicating that the certicate is valid and correct is called the
Certicate Authority (CA).
Certicate signing requests (CSR)
In an X.509v3 system, an entity that wants a signed certicate or a digital certicate requests one through a Certicate Signing Request
(CSR).
How certicates are requested
The following enumeration describes the generic steps that are involved in issuing a digital certicate:
68
1138 X.509v3