F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices VPN Configuration Guide-6PW100

278
Figure 186 CRL information
254BCertificate request from a Windows 2003 CA server
configuration example
514BNetwork requirements
As shown in 899HFigure 187, configure the fireall to work as the PKI entity, so that:
• The firewall submits a local certificate request to the CA server, which runs Windows 2003 server
operating system.
• The firewall retrieves CRLs for certificate verification.
Figure 187 Network diagram
515BConfiguring the CA server
1. Install the CA server component:
a. Select Control Panel > Add or Remove Programs from the start menu.
b. Select Add/Remove Windows Components.
c. Select Certificate Services in the pop-up dialog box.
d. Click Next to begin the installation.